利用apache ftpserver搭建ftp伺服器
操作環境:
win2012r2 x64 datacenter
Apache FtpServer 1.2.0
Java SE Development Kit 8u333
commons-dbcp2-2.9.0.jar
commons-pool2-2.11.1.jar
mysql server 8.0.29
mysql-connector-java-8.0.29.jar
sqlite
sqlite-jdbc-3.36.0.3.jar
如下圖:
一、usermanager採用文件形式管理xml示例如下
<?xml version="1.0" encoding="UTF-8"?>
<!--
Licensed to the Apache Software Foundation (ASF) under one or more
contributor license agreements. See the NOTICE file distributed with
this work for additional information regarding copyright ownership.
The ASF licenses this file to you under the Apache License, Version
2.0 (the "License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at
//www.apache.org/licenses/LICENSE-2.0 Unless required by
applicable law or agreed to in writing, software distributed under the
License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
CONDITIONS OF ANY KIND, either express or implied. See the License for
the specific language governing permissions and limitations under the
License.
-->
<server xmlns="//mina.apache.org/ftpserver/spring/v1"
xmlns:xsi="//www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="
//mina.apache.org/ftpserver/spring/v1 //mina.apache.org/ftpserver-project/ftpserver-1.0.xsd
"
id="myServer">
<listeners>
<nio-listener name="default" port="21">
<ssl>
<keystore file="./res/ftpserver.jks" password="password" />
</ssl>
</nio-listener>
</listeners>
<file-user-manager file="./res/conf/users.properties" />
</server>
二、usermanager採用mysql資料庫管理用戶時,ftpd-mysql.xml示例如下
目前資料庫管理用戶時採用的明文存儲,salted和md5的方式沒有測試成功,如有測試成功的朋友請指導一下。
<?xml version="1.0" encoding="UTF-8"?>
<!-- Licensed to the Apache Software Foundation (ASF) under one or more contributor
license agreements. See the NOTICE file distributed with this work for additional
information regarding copyright ownership. The ASF licenses this file to
you under the Apache License, Version 2.0 (the "License"); you may not use
this file except in compliance with the License. You may obtain a copy of
the License at //www.apache.org/licenses/LICENSE-2.0 Unless required
by applicable law or agreed to in writing, software distributed under the
License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS
OF ANY KIND, either express or implied. See the License for the specific
language governing permissions and limitations under the License. -->
<server xmlns="//mina.apache.org/ftpserver/spring/v1"
xmlns:xsi="//www.w3.org/2001/XMLSchema-instance" xmlns:beans="//www.springframework.org/schema/beans"
xsi:schemaLocation="
//www.springframework.org/schema/beans
//www.springframework.org/schema/beans/spring-beans-2.5.xsd
//mina.apache.org/ftpserver/spring/v1
//mina.apache.org/ftpserver/ftpserver-1.0.xsd
"
id="myServer">
<listeners>
<nio-listener name="default" port="21">
<ssl>
<keystore file="./res/ftpserver.jks" password="password" />
</ssl>
</nio-listener>
</listeners>
<db-user-manager encrypt-passwords="clear">
<data-source>
<beans:bean class="org.apache.commons.dbcp2.BasicDataSource">
<beans:property name="driverClassName" value="com.mysql.jdbc.Driver" />
<beans:property name="url" value="jdbc:mysql://localhost/ftpserver" />
<beans:property name="username" value="root" />
<beans:property name="password" value="123456" />
</beans:bean>
</data-source>
<insert-user>INSERT INTO FTP_USER (userid, userpassword,
homedirectory, enableflag, writepermission, idletime, uploadrate,
downloadrate) VALUES ('{userid}', '{userpassword}',
'{homedirectory}',
{enableflag}, {writepermission}, {idletime},
{uploadrate},
{downloadrate})
</insert-user>
<update-user>UPDATE FTP_USER SET
userpassword='{userpassword}',homedirectory='{homedirectory}',enableflag={enableflag},writepermission={writepermission},idletime={idletime},uploadrate={uploadrate},downloadrate={downloadrate}
WHERE userid='{userid}'
</update-user>
<delete-user>DELETE FROM FTP_USER WHERE userid = '{userid}'
</delete-user>
<select-user>SELECT userid, userpassword, homedirectory,
enableflag, writepermission, idletime, uploadrate, downloadrate,
maxloginnumber, maxloginperip FROM
FTP_USER WHERE userid = '{userid}'
</select-user>
<select-all-users>
SELECT userid FROM FTP_USER ORDER BY userid
</select-all-users>
<is-admin>SELECT userid FROM FTP_USER WHERE userid='{userid}'
AND
userid='admin'
</is-admin>
<authenticate>SELECT userpassword from FTP_USER WHERE
userid='{userid}'
</authenticate>
</db-user-manager>
</server>
注意:org.apache.commons.dbcp2.BasicDataSource,看最新的commons.dbcp命名空間和1.x版本有區別
三、usermanager採用Sqlite資料庫管理用戶時,ftpd-sqlite.xml示例如下
<?xml version="1.0" encoding="UTF-8"?>
<!-- Licensed to the Apache Software Foundation (ASF) under one or more contributor
license agreements. See the NOTICE file distributed with this work for additional
information regarding copyright ownership. The ASF licenses this file to
you under the Apache License, Version 2.0 (the "License"); you may not use
this file except in compliance with the License. You may obtain a copy of
the License at //www.apache.org/licenses/LICENSE-2.0 Unless required
by applicable law or agreed to in writing, software distributed under the
License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS
OF ANY KIND, either express or implied. See the License for the specific
language governing permissions and limitations under the License. -->
<server xmlns="//mina.apache.org/ftpserver/spring/v1"
xmlns:xsi="//www.w3.org/2001/XMLSchema-instance" xmlns:beans="//www.springframework.org/schema/beans"
xsi:schemaLocation="
//www.springframework.org/schema/beans
//www.springframework.org/schema/beans/spring-beans-2.5.xsd
//mina.apache.org/ftpserver/spring/v1
//mina.apache.org/ftpserver/ftpserver-1.0.xsd
"
id="myServer">
<listeners>
<nio-listener name="default" port="21">
<ssl>
<keystore file="./res/ftpserver.jks" password="password" />
</ssl>
</nio-listener>
</listeners>
<db-user-manager encrypt-passwords="clear">
<data-source>
<beans:bean class="org.apache.commons.dbcp2.BasicDataSource">
<beans:property name="driverClassName" value="org.sqlite.JDBC" />
<beans:property name="url" value="jdbc:sqlite:ftp.db" />
</beans:bean>
</data-source>
<insert-user>INSERT INTO FTP_USER (userid, userpassword,
homedirectory, enableflag, writepermission, idletime, uploadrate,
downloadrate) VALUES ('{userid}', '{userpassword}',
'{homedirectory}',
{enableflag}, {writepermission}, {idletime},
{uploadrate},
{downloadrate})
</insert-user>
<update-user>UPDATE FTP_USER SET
userpassword='{userpassword}',homedirectory='{homedirectory}',enableflag={enableflag},writepermission={writepermission},idletime={idletime},uploadrate={uploadrate},downloadrate={downloadrate}
WHERE userid='{userid}'
</update-user>
<delete-user>DELETE FROM FTP_USER WHERE userid = '{userid}'
</delete-user>
<select-user>SELECT userid, userpassword, homedirectory,
enableflag, writepermission, idletime, uploadrate, downloadrate,
maxloginnumber, maxloginperip FROM
FTP_USER WHERE userid = '{userid}'
</select-user>
<select-all-users>
SELECT userid FROM FTP_USER ORDER BY userid
</select-all-users>
<is-admin>SELECT userid FROM FTP_USER WHERE userid='{userid}'
AND
userid='admin'
</is-admin>
<authenticate>SELECT userpassword from FTP_USER WHERE
userid='{userid}'
</authenticate>
</db-user-manager>
</server>
注意:commons的jar包還保留著,多了個操作sqlitejdbc的jar包,下載地址:GitHub – xerial/sqlite-jdbc: SQLite JDBC Driver
四、解決ftpd.exe在64位windows系統啟動失敗的問題
需下載tomcat包,目前測試的這個版本可行tomcat-7 v7.0.109 (apache.org)
放入apache ftpserver bin目錄里替換原有的ftpd.exe
這樣安裝為服務的時候就可以正常啟動了
五、python操作sqlite的ftp.db管理(增加刪除)用戶
自己搞了個python腳本,採用了sqlalchemy來操作資料庫
from sqlalchemy import create_engine
from sqlalchemy import MetaData,Table,Column,Boolean,Integer,String
import os
engine=create_engine('sqlite:///ftp.db')
conn=engine.connect()
metadata=MetaData()
ftpusers=Table('FTP_USER',metadata,
Column('userid',String(64),primary_key=True),
Column('userpassword',String(64),nullable=False),
Column('homedirectory',String(128),nullable=False),
Column('enableflag',Boolean(),default=True),
Column('writepermission',Boolean(),default=True),
Column('idletime',Integer(),default=0),
Column('uploadrate',Integer(),default=0),
Column('downloadrate',Integer(),default=0),
Column('maxloginnumber',Integer(),default=0),
Column('maxloginperip',Integer(),default=0)
)
metadata.create_all(engine)
def addgeneraluser():
deluser = ftpusers.delete().where(ftpusers.c.userid=="nic")
rs = conn.execute(deluser)
dirname="./files/alluser"
if not os.path.exists(dirname):
os.mkdir(dirname)
ins=ftpusers.insert().values(
userid="nic",
userpassword="123321",
homedirectory=dirname,
writepermission=0,
maxloginnumber=1
)
result=conn.execute(ins)
def addadmin():
deladmin = ftpusers.delete().where(ftpusers.c.userid=="admin")
rs = conn.execute(deladmin)
ins=ftpusers.insert().values(
userid="admin",
userpassword="123456",
homedirectory="./files",
writepermission=1
)
result=conn.execute(ins)
def getusers():
sel=ftpusers.select()
rs=conn.execute(sel)
print(rs.fetchall())
addgeneraluser()
getusers()
可以方便的增加用戶了,generaluser只讀許可權只能同時登錄一個,admin許可權可讀寫,不限制。