1.Linux service命令
2.虚拟机Linux系统解压vsftp.tar.gz后怎么手动安装
3.VSFTPD服务器配置问题

Linux service命令

       一堆人都没有回答到关键，码安提示未被识别的码安命令，所谓命令，码安当然是码安csock源码指service未被识别了。楼主看看是码安不是启动vsftp时,service拼写错误？

       vsftpd这个服务名在最新版也没有变过。

       建议如下：

       一、码安在/etc/init.d/目录看看能不能找到vsftpd

       find /etc/init.d|grep vsftpd

       二、码安使用/etc/init.d/vsftpd start看是码安否可以启动

       三、vsftpd是码安编译的，有没有在编译之前，码安系统自带有vsftpd，码安c++ ce源码如果有，码安那么编译时指定单独路径，码安并且在编译后的码安路径下去启动vsftpd，也可以把启动加入到系统服务。码安

虚拟机Linux系统解压vsftp.tar.gz后怎么手动安装

       去官网或者centos git下载release版本。非root用户安装，--prefix=/usr/local/vsftpd-x-y-x 安装目录大概选择这个. 当然也可以参照deb build。post取网页源码

       参照centos sftpd spec文件，看看里面的编译选项，都打开了哪些？如果直接configure很可能出现各种隐藏的系统配置和漏洞问题。如有需要，对源码进行改修修正。app源码网下载

       make之后做测试。make test。

       配置项测试。

VSFTPD服务器配置问题

           登录出现 vsftpd login incorrect 报错。

       解决方法：

       cp Path/RedHat/vsftpd.pam /etc/pam.d/ftp

       path为vsftp解压缩源文件目录

       这是因为我们RHEL启用了PAM,所在用到vsftp时需要用到 /etc/pam.d/ftp这个文件（默认源码安装的不会有这个文件），因此除了匿名用户外本地用户无法登录。

方法二：

       在测试Checkpoint的***1 R6x的时候，遇到了这个错误。这说明client端跟server端的连接性是没问题。但是就是想不出为什么，还以为是用户名和口令错误呢。后来才google了一下，发现是server端的配置有问题。

       检查/etc/vsftpd/user_list和/etc/ftpusers，是这个文件/etc/vsftpd/vsftpd.conf少了一行：

       复制代码

       代码如下:

       pam_service_name=vsftpd

           $ echo ‘pam_service_name=vsftpd’ /etc/vsftpd/vsftpd.conf

           $ service vsftpd restart

        error就消除了！

下面是更详细的方法：

       [root@atr-3-server1 admin]# cat /etc/vsftpd/vsftpd.conf

           # Example config file /etc/vsftpd.conf

           #

           # The default compiled in settings are fairly paranoid. This sample file

           # loosens things up a bit, to make the ftp daemon more usable.

           # Please see vsftpd.conf.5 for all compiled in defaults.

           #

           # READ THIS: This example file is NOT an exhaustive list of vsftpd options.

           # Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's

           # capabilities.

           #

           # Allow anonymous FTP? (Beware - allowed by default if you comment this out).

           anonymous_enable=no

           #

           # Uncomment this to allow local users to log in.

           local_enable=YES

           #

           # Uncomment this to enable any form of FTP write command.

           write_enable=YES

           #

           # Default umask for local users is . You may wish to change this to ,

           # if your users expect that ( is used by most other ftpd's)

           local_umask=

           #

           # Uncomment this to allow the anonymous FTP user to upload files. This only

           # has an effect if the above global write enable is activated. Also, you will

           # obviously need to create a directory writable by the FTP user.

           #anon_upload_enable=YES

           #

           # Uncomment this if you want the anonymous FTP user to be able to create

           # new directories.

           #anon_mkdir_write_enable=YES

           #

           # Activate directory messages - messages given to remote users when they

           # go into a certain directory.

           dirmessage_enable=YES

           #

           # Activate logging of uploads/downloads.

           xferlog_enable=YES

           #

           # Make sure PORT transfer connections originate from port (ftp-data).

           connect_from_port_=YES

           #

           # If you want, you can arrange for uploaded anonymous files to be owned by

           # a different user. Note! Using "root" for uploaded files is not

           # recommended!

           #chown_uploads=YES

           #chown_username=whoever

           #

           # You may override where the log file goes if you like. The default is shown

           # below.

           #xferlog_file=/var/log/vsftpd.log

           #

           # If you want, you can have your log file in standard ftpd xferlog format

           xferlog_std_format=YES

           #

           # You may change the default value for timing out an idle session.

           #idle_session_timeout=

           #

           # You may change the default value for timing out a data connection.

           #data_connection_timeout=

           #

           # It is recommended that you define on your system a unique user which the

           # ftp server can use as a totally isolated and unprivileged user.

           #nopriv_user=ftpsecure

           #

           # Enable this and the server will recognise asynchronous ABOR requests. Not

           # recommended for security (the code is non-trivial). Not enabling it,

           # however, may confuse older FTP clients.

           #async_abor_enable=YES

           #

           # By default the server will pretend to allow ASCII mode but in fact ignore

           # the request. Turn on the below options to have the server actually do ASCII

           # mangling on files when in ASCII mode.

           # Beware that turning on ascii_download_enable enables malicious remote parties

           # to consume your I/O resources, by issuing the command "SIZE /big/file" in

           # ASCII mode.

           # These ASCII options are split into upload and download because you may wish

           # to enable ASCII uploads (to prevent uploaded scripts etc. from breaking),

           # without the DoS risk of SIZE and ASCII downloads. ASCII mangling should be

           # on the client anyway..

           #ascii_upload_enable=YES

           #ascii_download_enable=YES

           #

           # You may fully customise the login banner string:

           #ftpd_banner=Welcome to blah FTP service.

           #

           # You may specify a file of disallowed anonymous e-mail addresses. Apparently

           # useful for combatting certain DoS attacks.

           #deny_email_enable=YES

           # (default follows)

           #banned_email_file=/etc/vsftpd.banned_emails

           #

           # You may specify an explicit list of local users to chroot() to their home

           # directory. If chroot_local_user is YES, then this list becomes a list of

           # users to NOT chroot().

           #chroot_list_enable=YES

           # (default follows)

           #chroot_list_file=/etc/vsftpd.chroot_list

           #

           # You may activate the "-R" option to the builtin ls. This is disabled by

           # default to avoid remote users being able to cause excessive I/O on large

           # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume

           # the presence of the "-R" option, so there is a strong case for enabling it.

           #ls_recurse_enable=YES

       pam_service_name=vsftpd

           userlist_enable=YES

           #enable for standalone mode

           listen=YES

           tcp_wrappers=YES