Ftp feature\u00a0is\u00a0 useful especially when\u00a0 the linux server is in remote location\u00a0 and\u00a0we want to transfer\u00a0files\u00a0to server .<\/p>\n
Configuring ftp on linux is pretty straight forward\u00a0 and may be the procedure is almost similar\u00a0 in all\u00a0 linux distros (\u00a0\u00a0 I should have put the post title as ‘configuring ftp on redhat linux’ for this post\u00a0 as I am writing about the steps which I followed to install ftp on my redhat server).<\/p>\n
1.installed \u00a0vsftp\u00a0( very secure ftp\u00a0) package with \u00a0the yum…yum… yummy\u00a0 command\u00a0\u00a0\u00a0 yum<\/span><\/p>\n 2. Edited\u00a0\u00a0\u00a0 \u00a0\/etc\/vsftpd\/vsftpd.conf\u00a0\u00a0\u00a0 file<\/p>\n 3.created a\u00a0 ftp user\u00a0 and changed\u00a0 the user home directory<\/p>\n <\/p>\n vsftpd installation:<\/p>\n when i typed the command yum install vsftpd i got the error message ‘failed to retrieve repodata\/filelists.xml.gz from rhel-x86_64-server-5’<\/p>\n #yum install vsftpd<\/em><\/span><\/p>\n [Error: failed to retrieve repodata\/filelists.xml.gz from rhel-x86_64-server-5<\/span> You could try using –skip-broken to work around the problem<\/span> <\/p>\n Finally i got vsftpd installed with the commands..<\/p>\n #sudo yum clean all<\/em><\/span><\/p>\n #sudo rhn-profile-sync\u00a0\u00a0<\/em>\u00a0 then\u00a0<\/span><\/span>\u00a0\u00a0 <\/em><\/span><\/p>\n #yum install vsftpd<\/em><\/span><\/p>\n <\/p>\n Added ftp user:\u00a0 <\/em><\/span><\/p>\n #useradd demoftp\u00a0\u00a0 <\/span><\/em>(create a user with the name demoftp)<\/span><\/p>\n #passwd demoftp\u00a0\u00a0\u00a0\u00a0 <\/span><\/em>(change password for user demoftp)<\/span><\/p>\n added the same user name in the file <\/span>\/etc\/vsftpd\/user_list<\/span><\/em><\/p>\n # vi \/etc\/vsftpd\/user_list<\/em>\u00a0\u00a0 ( press<\/span> i to insert and use arrow keys to move the cursor .After typing in the username ,\u00a0press<\/span> escape <\/em>and<\/span>\u00a0\u00a0 type<\/span>\u00a0\u00a0 :wq and press<\/span> enter to save and exit from vim editor)<\/span><\/span><\/p>\n Modified the vsftpd.conf<\/span><\/em> file\u00a0 :<\/span><\/span><\/p>\n #vi \/etc\/vsftpd\/vsftpd.conf<\/span><\/em><\/p>\n added<\/span><\/span><\/p>\n max_clients=3 and\u00a0\u00a0\u00a0changed userlist_enable=YES to userlist_enable=NO<\/span><\/span><\/span><\/p>\n my vsftpd.conf looked like this after editing <\/em><\/span><\/p>\n <\/p>\n # Example config file \/etc\/vsftpd\/vsftpd.conf <\/p>\n And finally ,Started the service\u00a0 with the command<\/span> <\/span>service vsftpd start .<\/span><\/em><\/span><\/p>\n #service vsftpd start<\/em><\/span><\/p>\n <\/p>\n And \u00a0i tried to\u00a0login to ftp ,but got the error message \u00a0<\/span>\u00a0“500 OOPS: cannot change directory” .<\/span><\/span><\/p>\n I forgot to add selinux exception\u00a0 ( selinux is a enhanced security policy feauture comes with newer version of kernels).<\/span><\/span><\/p>\n I did run\u00a0the command ‘\u00a0 \/usr\/sbin\/setsebool\u00a0 -P ftp_home_dir=1<\/span> ‘\u00a0 <\/em>from root and it fixed the problem.<\/span><\/span><\/p>\n I\u00a0could have used\u00a0 setsebool -P allow_ftpd_full_access 1\u00a0 <\/span><\/em>to allow\u00a0 full access to ftp thorugh selinux.<\/span><\/span><\/p>\n <\/p>\n <\/p>\n <\/p>\n Next, I binded a directory for demoftp user\u00a0 which is out side of that user’s home directory.<\/p>\n <\/p>\n # mount –bind\/\/opt\/apache2\/htdocs\/test\/\u00a0 \/home\/demoftp\/\u00a0\u00a0\u00a0 <\/em>( \/opt\/apache2\/htdocs\/test\/ is the directory i want to access when i login\u00a0 from ftp with\u00a0 demoftp account).<\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n <\/p>\n","protected":false},"excerpt":{"rendered":" Ftp feature\u00a0is\u00a0 useful especially when\u00a0 the linux server is in remote location\u00a0 and\u00a0we want to transfer\u00a0files\u00a0to server . Configuring ftp on linux is pretty straight forward\u00a0 and may be the procedure is almost similar\u00a0 in all\u00a0 linux distros (\u00a0\u00a0 I should have put the post title as ‘configuring ftp on […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[7],"tags":[119,115,117,120,116,118],"yoast_head":"\n
\nerror was [Errno 14] HTTP Error 404: Not Found]<\/span>
\nThe program package-cleanup is found in the yum-utils package<\/span><\/p>\n
\n\u00a0You could try running: package-cleanup –problems<\/span>
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 package-cleanup –dupes<\/span>
\n\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 rpm -Va –nofiles –nodigest<\/span><\/p>\n
\nmax_per_ip=3<\/span><\/p>\n
\n#
\n# The default compiled in settings are fairly paranoid. This sample file
\n# loosens things up a bit, to make the ftp daemon more usable.
\n# Please see vsftpd.conf.5 for all compiled in defaults.
\n#
\n# READ THIS: This example file is NOT an exhaustive list of vsftpd options.
\n# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd’s
\n# capabilities.
\n#
\n# Allow anonymous FTP? (Beware – allowed by default if you comment this out).
\nanonymous_enable=YES
\n#
\n# Uncomment this to allow local users to log in.
\nlocal_enable=YES
\n#
\n# Uncomment this to enable any form of FTP write command.
\nwrite_enable=YES
\n#
\n# Default umask for local users is 077. You may wish to change this to 022,
\n# if your users expect that (022 is used by most other ftpd’s)
\nlocal_umask=022
\n#
\n# Uncomment this to allow the anonymous FTP user to upload files. This only
\n# has an effect if the above global write enable is activated. Also, you will
\n# obviously need to create a directory writable by the FTP user.
\n#anon_upload_enable=YES
\n#
\n# Uncomment this if you want the anonymous FTP user to be able to create
\n# new directories.
\n#anon_mkdir_write_enable=YES
\n#
\n# Activate directory messages – messages given to remote users when they
\n# go into a certain directory.
\ndirmessage_enable=YES
\n#
\n# The target log file can be vsftpd_log_file or xferlog_file.
\n# This depends on setting xferlog_std_format parameter
\nxferlog_enable=YES
\n#
\n# Make sure PORT transfer connections originate from port 20 (ftp-data).
\nconnect_from_port_20=YES
\n#
\n# If you want, you can arrange for uploaded anonymous files to be owned by
\n# a different user. Note! Using “root” for uploaded files is not
\n# recommended!
\n#chown_uploads=YES
\n#chown_username=whoever
\n#
\n# The name of log file when xferlog_enable=YES and xferlog_std_format=YES
\n# WARNING – changing this filename affects \/etc\/logrotate.d\/vsftpd.log
\n#xferlog_file=\/var\/log\/xferlog
\n#
\n# Switches between logging into vsftpd_log_file and xferlog_file files.
\n# NO writes to vsftpd_log_file, YES to xferlog_file
\nxferlog_std_format=YES
\n#
\n# You may change the default value for timing out an idle session.
\n#idle_session_timeout=600
\n#
\n# You may change the default value for timing out a data connection.
\n#data_connection_timeout=120
\n#
\n# It is recommended that you define on your system a unique user which the
\n# ftp server can use as a totally isolated and unprivileged user.
\n#nopriv_user=ftpsecure
\n#
\n# Enable this and the server will recognise asynchronous ABOR requests. Not
\n# recommended for security (the code is non-trivial). Not enabling it,
\n# however, may confuse older FTP clients.
\n#async_abor_enable=YES
\n#
\n# By default the server will pretend to allow ASCII mode but in fact ignore
\n# the request. Turn on the below options to have the server actually do ASCII
\n# mangling on files when in ASCII mode.
\n# Beware that on some FTP servers, ASCII support allows a denial of service
\n# attack (DoS) via the command “SIZE \/big\/file” in ASCII mode. vsftpd
\n# predicted this attack and has always been safe, reporting the size of the
\n# raw file.
\n# ASCII mangling is a horrible feature of the protocol.
\n#ascii_upload_enable=YES
\n#ascii_download_enable=YES
\n#
\n# You may fully customise the login banner string:
\n#ftpd_banner=Welcome to blah FTP service.
\n#
\n# You may specify a file of disallowed anonymous e-mail addresses. Apparently
\n# useful for combatting certain DoS attacks.
\n#deny_email_enable=YES
\n# (default follows)
\n#banned_email_file=\/etc\/vsftpd\/banned_emails
\n#
\n# You may specify an explicit list of local users to chroot() to their home
\n# directory. If chroot_local_user is YES, then this list becomes a list of
\n# users to NOT chroot().
\n#chroot_list_enable=YES
\n# (default follows)
\n#chroot_list_file=\/etc\/vsftpd\/chroot_list
\n#
\n# You may activate the “-R” option to the builtin ls. This is disabled by
\n# default to avoid remote users being able to cause excessive I\/O on large
\n# sites. However, some broken FTP clients such as “ncftp” and “mirror” assume
\n# the presence of the “-R” option, so there is a strong case for enabling it.
\n#ls_recurse_enable=YES
\n#
\n# When “listen” directive is enabled, vsftpd runs in standalone mode and
\n# listens on IPv4 sockets. This directive cannot be used in conjunction
\n# with the listen_ipv6 directive.
\nlisten=YES
\n#
\n# This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6
\n# sockets, you must run two copies of vsftpd whith two configuration files.
\n# Make sure, that one of the listen options is commented !!
\n#listen_ipv6=YES
\nmax_clients=3
\nmax_per_ip=3
\npam_service_name=vsftpd
\nuserlist_enable=NO
\ntcp_wrappers=YES<\/span><\/p>\n