Version 1.0
Author: Falko Timme, updated by Srijan Kishore
Last edited 30/Apr/2014
This document describes how to install a PureFTPd server that uses virtual users from a MySQL database instead of real system users. This is much more performant and allows to have thousands of ftp users on a single machine. In addition to that I will show the use of quota and upload/download bandwidth limits with this setup. Passwords will be stored encrypted as MD5 strings in the database. This tutorial is based on Ubuntu 14.04.
For the administration of the MySQL database you can use web based tools like phpMyAdmin which will also be installed in this howto. phpMyAdmin is a comfortable graphical interface which means you do not have to mess around with the command line.
This howto is meant as a practical guide; it does not cover the theoretical backgrounds. They are treated in a lot of other documents in the web.
This document comes without warranty of any kind! I want to say that this is not the only way of setting up such a system. There are many ways of achieving this goal but this is the way I take. I do not issue any guarantee that this will work for you!
In this tutorial I use the hostnameserver1.example.comwith the IP address192.168.0.100. These settings might differ for you, so you have to replace them where appropriate.
Make sure that you are logged in as root (type in
sudo su
to become root), because we must run all the steps from this tutorial as root user.
This can all be installed with one single command:
apt-get install mysql-server mysql-client phpmyadmin apache2
You will be asked these questions:
New password for the MySQL "root" user:<-- yourrootsqlpassword
Repeat password for the MySQL "root" user:<-- yourrootsqlpassword
Web server to reconfigure automatically:<-- apache2
Configure database for phpmyadmin with dbconfig-common?<-- No
For Ubuntu 14.04 there is a pre-configuredpure-ftpd-mysqlpackage available. Install it like this:
apt-get install pure-ftpd-mysql
Then we create an ftp group (ftpgroup) and user (ftpuser) that all our virtual users will be mapped to. Replace the group- and userid2001with a number that is free on your system:
groupadd -g 2001 ftpgroup
useradd -u 2001 -s /bin/false -d /bin/null -c "pureftpd user" -g ftpgroup ftpuser
Now we create a database calledpureftpdand a MySQL user namedpureftpdwhich the PureFTPd daemon will use later on to connect to thepureftpddatabase:
mysql -u root -p
CREATE DATABASE pureftpd;
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO 'pureftpd'@'localhost' IDENTIFIED BY 'ftpdpass';
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP ON pureftpd.* TO 'pureftpd'@'localhost.localdomain' IDENTIFIED BY 'ftpdpass';
FLUSH PRIVILEGES;
Replace the stringftpdpasswith whatever password you want to use for the MySQL userpureftpd. Still on the MySQL shell, we create the database table we need (yes, there is only one table!):
USE pureftpd;
CREATE TABLE ftpd (
User varchar(16) NOT NULL default '',
status enum('0','1') NOT NULL default '0',
Password varchar() NOT NULL default '',
Uid varchar(11) NOT NULL default '-1',
Gid varchar(11) NOT NULL default '-1',
Dir varchar(128) NOT NULL default '',
ULBandwidth smallint(5) NOT NULL default '0',
DLBandwidth smallint(5) NOT NULL default '0',
comment tinytext NOT NULL,
ipaccess varchar(15) NOT NULL default '*',
QuotaSize smallint(5) NOT NULL default '0',
QuotaFiles int(11) NOT NULL default 0,
PRIMARY KEY (User),
UNIQUE KEY User (User)
) ENGINE=MyISAM;
quit;
As you may have noticed, with thequit;command we have left the MySQL shell and are back on the Linux shell.
BTW, (I'm assuming that the hostname of your ftp server system isserver1.example.com) you can access phpMyAdmin underhttp://server1.example.com/phpmyadmin/(you can also use the IP address instead ofserver1.example.com) in a browser and log in as the userpureftpd. Then you can have a look at the database. Later on you can use phpMyAdmin to administrate your PureFTPd server.
Edit/etc/pure-ftpd/db/mysql.conf. It should look like this:
cp /etc/pure-ftpd/db/mysql.conf /etc/pure-ftpd/db/mysql.conf_orig
cat /dev/null > /etc/pure-ftpd/db/mysql.conf
vi /etc/pure-ftpd/db/mysql.conf
MYSQLSocket/var/run/mysqld/mysqld.sock#MYSQLServer localhost#MYSQLPort 3306MYSQLUser pureftpdMYSQLPassword ftpdpassMYSQLDatabase pureftpd#MYSQLCrypt md5, cleartext, crypt() or password() - md5 is VERY RECOMMENDABLE uppon cleartextMYSQLCryptmd5MYSQLGetPWSELECT Password FROM ftpd WHERE User="/L" AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MYSQLGetUID SELECT Uid FROM ftpd WHERE User="/L" AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MYSQLGetGID SELECT Gid FROM ftpd WHERE User="/L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MYSQLGetDir SELECT Dir FROM ftpd WHERE User="/L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MySQLGetBandwidthUL SELECT ULBandwidth FROM ftpd WHERE User="/L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MySQLGetBandwidthDL SELECT DLBandwidth FROM ftpd WHERE User="/L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MySQLGetQTASZ SELECT QuotaSize FROM ftpd WHERE User="/L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R")MySQLGetQTAFS SELECT QuotaFiles FROM ftpd WHERE User="/L"AND status="1" AND (ipaccess = "*" OR ipaccess LIKE "/R") |
Make sure that you replace the stringftpdpasswith the real password for the MySQL userpureftpdin the lineMYSQLPassword! Please note that we use md5 asMYSQLCryptmethod, which means we will store the users' passwords as an MD5 string in the database which is far more secure than using plain text passwords!
Then create the file/etc/pure-ftpd/conf/ChrootEveryonewhich simply contains the stringyes:
echo "yes" > /etc/pure-ftpd/conf/ChrootEveryone
This will make PureFTPd chroot every virtual user in his home directory so he will not be able to browse directories and files outside his home directory.
Also create the file/etc/pure-ftpd/conf/CreateHomeDirwhich again simply contains the stringyes:
echo "yes" > /etc/pure-ftpd/conf/CreateHomeDir
This will make PureFTPd create a user's home directory when the user logs in and the home directory does not exist yet.
Finally create the file/etc/pure-ftpd/conf/DontResolvewhich again simply contains the stringyes:
echo "yes" > /etc/pure-ftpd/conf/DontResolve
This will make that PureFTPd doesn't look up host names which can significantly speed up connections and reduce bandwidth usage.
Afterwards, we restart PureFTPd:
service pure-ftpd-mysql restart
下载本文