vsftpd的530 Login incorrect问题

蔚落 2022-09-20 15:14 190阅读 0赞

在测试Checkpoint的VPN1 R6x的时候，遇到了这个错误。这说明client端跟server端的连接性是没问题。但是就是想不出为什么，还以为是用户名和口令错误呢。后来才google了一下，发现是server端的配置有问题。  
检查/etc/vsftpd/user\_list和/etc/ftpusers，是这个文件/etc/vsftpd/vsftpd.conf(或/etc/vsftpd.conf)少了一行：  
pam\_service\_name=vsftpd  
  
$ echo ‘pam\_service\_name=vsftpd’ >>/etc/vsftpd/vsftpd.conf  
$ service vsftpd restart  
  
530 error就消除了！  
  
\[root@atr-3-server1 admin\]\# cat /etc/vsftpd/vsftpd.conf  
\# Example config file /etc/vsftpd.conf  
\#  
\# The default compiled in settings are fairly paranoid. This sample file  
\# loosens things up a bit, to make the ftp daemon more usable.  
\# Please see vsftpd.conf.5 for all compiled in defaults.  
\#  
\# READ THIS: This example file is NOT an exhaustive list of vsftpd options.  
\# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's  
\# capabilities.  
\#  
\# Allow anonymous FTP? (Beware - allowed by default if you comment this out).  
anonymous\_enable=no  
\#  
\# Uncomment this to allow local users to log in.  
local\_enable=YES  
\#  
\# Uncomment this to enable any form of FTP write command.  
write\_enable=YES  
\#  
\# Default umask for local users is 077. You may wish to change this to 022,  
\# if your users expect that (022 is used by most other ftpd's)  
local\_umask=022  
\#  
\# Uncomment this to allow the anonymous FTP user to upload files. This only  
\# has an effect if the above global write enable is activated. Also, you will  
\# obviously need to create a directory writable by the FTP user.  
\#anon\_upload\_enable=YES  
\#  
\# Uncomment this if you want the anonymous FTP user to be able to create  
\# new directories.  
\#anon\_mkdir\_write\_enable=YES  
\#  
\# Activate directory messages - messages given to remote users when they  
\# go into a certain directory.  
dirmessage\_enable=YES  
\#  
\# Activate logging of uploads/downloads.  
xferlog\_enable=YES  
\#  
\# Make sure PORT transfer connections originate from port 20 (ftp-data).  
connect\_from\_port\_20=YES  
\#  
\# If you want, you can arrange for uploaded anonymous files to be owned by  
\# a different user. Note! Using "root" for uploaded files is not  
\# recommended!  
\#chown\_uploads=YES  
\#chown\_username=whoever  
\#  
\# You may override where the log file goes if you like. The default is shown  
\# below.  
\#xferlog\_file=/var/log/vsftpd.log  
\#  
\# If you want, you can have your log file in standard ftpd xferlog format  
xferlog\_std\_format=YES  
\#  
\# You may change the default value for timing out an idle session.  
\#idle\_session\_timeout=600  
\#  
\# You may change the default value for timing out a data connection.  
\#data\_connection\_timeout=120  
\#  
\# It is recommended that you define on your system a unique user which the  
\# ftp server can use as a totally isolated and unprivileged user.  
\#nopriv\_user=ftpsecure  
\#  
\# Enable this and the server will recognise asynchronous ABOR requests. Not  
\# recommended for security (the code is non-trivial). Not enabling it,  
\# however, may confuse older FTP clients.  
\#async\_abor\_enable=YES  
\#  
\# By default the server will pretend to allow ASCII mode but in fact ignore  
\# the request. Turn on the below options to have the server actually do ASCII  
\# mangling on files when in ASCII mode.  
\# Beware that turning on ascii\_download\_enable enables malicious remote parties  
\# to consume your I/O resources, by issuing the command "SIZE /big/file" in  
\# ASCII mode.  
\# These ASCII options are split into upload and download because you may wish  
\# to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),  
\# without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be  
\# on the client anyway..  
\#ascii\_upload\_enable=YES  
\#ascii\_download\_enable=YES  
\#  
\# You may fully customise the login banner string:  
\#ftpd\_banner=Welcome to blah FTP service.  
\#  
\# You may specify a file of disallowed anonymous e-mail addresses. Apparently  
\# useful for combatting certain DoS attacks.  
\#deny\_email\_enable=YES  
\# (default follows)  
\#banned\_email\_file=/etc/vsftpd.banned\_emails  
\#  
\# You may specify an explicit list of local users to chroot() to their home  
\# directory. If chroot\_local\_user is YES, then this list becomes a list of  
\# users to NOT chroot().  
\#chroot\_list\_enable=YES  
\# (default follows)  
\#chroot\_list\_file=/etc/vsftpd.chroot\_list  
\#  
\# You may activate the "-R" option to the builtin ls. This is disabled by  
\# default to avoid remote users being able to cause excessive I/O on large  
\# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume  
\# the presence of the "-R" option, so there is a strong case for enabling it.  
\#ls\_recurse\_enable=YES  
  
pam\_service\_name=vsftpd  
userlist\_enable=YES  
\#enable for standalone mode  
listen=YES  
tcp\_wrappers=YES