linux如何搭建sftp服务器
<div class="exp-content-block"><div class="exp-content-body exp-brief-step">
<div class="exp-content-listblock">
<div class="content-listblock-text">
<p> </p>
<p><span style="font-size: 15px">sftp采用的是ssh加密隧道，安装性方面较ftp强，而且依赖的是系统自带的ssh服务，不像ftp还需要额外的进行安装</span></p>
</div>
</div>
</div>
</div>
<div class="exp-content-block">
<p class="exp-content-list list-item-1"> </p>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 16px">1. 创建sftp组</span></strong></span></p>
<p> <strong># groupadd sftp </strong></p>
<p>创建完成之后使用cat /etc/group命令组的信息</p>
<p><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721190327279-1203813997.png"></p>
<p> </p>
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 15px">2. 创建一个sftp用户mysftp并加入到创建的sftp组中，同时修改mysftp用户的密码</span></strong></span> </p>
</div>
<div class="content-list-text">
<p><strong> # useradd -g sftp -s /bin/false mysftp </strong></p>
<p><strong> # passwd mysftp </strong></p>
</div>
<div class="content-list-media">
<div class="content-list-image clearfix"><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721190555834-68000529.png">
<p> </p>
</div>
</div>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 16px">3. 新建/data/sftp/mysftp目录，并将它指定为mysftp组用户的home目录</span></strong></span></p>
<p> <strong># mkdir -p /data/sftp/mysftp </strong></p>
<p><strong> # usermod -d /data/sftp/mysftp mysftp</strong></p>
</div>
<div class="content-list-media">
<div class="content-list-image clearfix"><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721190651310-1496501090.png">
<p> </p>
</div>
</div>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 16px">4. 编辑配置文件/etc/ssh/sshd_config，vi /etc/ssh/sshd_config</span></strong></span></p>
<p> 将如下这行用#符号注释掉</p>
<p> <strong># Subsystem sftp /usr/libexec/openssh/sftp-server </strong></p>
<p> </p>
<p> 并在文件最后面添加如下几行内容然后保存</p>
<p> Subsystem sftp internal-sftp </p>
<p> Match Group sftp </p>
<p> ChrootDirectory /data/sftp/%u </p>
<p> ForceCommand internal-sftp </p>
<p> AllowTcpForwarding no </p>
<p> X11Forwarding no </p>
</div>
<div class="content-list-media">
<div class="content-list-image clearfix"><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721190803931-466530668.png">
<p> </p>
</div>
</div>
<p class="exp-content-list list-item-5"> </p>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 16px">5. 设置Chroot目录权限</span></strong></span></p>
<p> <strong># chown root:sftp /data/sftp/mysftp </strong></p>
<p><strong> # chmod 755 /data/sftp/mys</strong></p>
<p><strong><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721190901342-326185468.png"></strong></p>
<p> </p>
</div>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1); font-size: 16px"><strong>6. 新建一个目录供stp用户mysftp上传文件，这个目录所有者为mysftp所有组为sftp，所有者有写入权限所有组无写入权限</strong></span></p>
<p> <strong># mkdir /data/sftp/mysftp/upload </strong></p>
<p><strong> # chown mysftp:sftp /data/sftp/mysftp/upload </strong></p>
<p><strong> # chmod 755 /data/sftp/mysftp/upload </strong></p>
</div>
<div class="content-list-media">
<div class="content-list-image clearfix"><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721191003265-417048492.png">
<p> </p>
</div>
</div>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 16px">7. 关闭selinux并重启sshd服务，然后测试</span></strong></span></p>
</div>
<div class="content-list-media">
<div class="content-list-image clearfix"><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721191029329-1126142717.png">
<p> </p>
</div>
</div>
<div class="content-list-text">
<p><span style="color: rgba(255, 0, 0, 1)"><strong><span style="font-size: 16px">8. 在其他服务器上进行验证,sftp 用户名@ip地址</span></strong></span></p>
</div>
<div class="content-list-media">
<div class="content-list-image clearfix"><img src="https://img2018.cnblogs.com/blog/1352343/201907/1352343-20190721191102776-933184056.png">
<p> </p>
</div>
</div>
</div><br><br>
来源：https://www.cnblogs.com/reachos/p/11157329.html
頁:
[1]