Fedora45 : FTP Server(Vsftpd) , File Server(Samba)

# dnf -y install vsftpd

# vsftpd -v
vsftpd: version 3.0.5

# cp /etc/vsftpd/vsftpd.conf /home/huong/vsftpd.conf.bak

# vi /etc/vsftpd/vsftpd.conf

Line 12: Anonymous login prohibited (confirmation)
anonymous_enable=NO
 
Line 39: Log transfer record (confirmation)
xferlog_enable=YES
 
Lines 82,83 Uncomment ( Allow transfer in ASCII mode )
ascii_upload_enable=YES
ascii_download_enable=YES
 
Lines 100,101: Uncomment ( chroot enabled )
chroot_local_user=YES
chroot_list_enable=YES
 
Line 103 Uncomment ( chroot list file specified )
chroot_list_file=/etc/vsftpd/chroot_list
 
Line 109 Uncomment ( Enable batch transfer by directory )
ls_recurse_enable=YES
 
Line 114 Change ( Enable IPv4 )
listen=YES
 
Line 123 Change (IPv6 is ignored)
listen_ipv6=NO
 
### Add to last line ###
# Use local time
use_localtime=YES

# echo "huong" >> /etc/vsftpd/chroot_list

# echo "vsftpd:192.168.11.0/24" >> /etc/hosts.allow

# echo "vsftpd:ALL" >> /etc/hosts.deny

# systemctl enable vsftpd
Created symlink /etc/systemd/system/multi-user.target.wants/vsftpd.service → /usr/lib/systemd/system/vsftpd.service.

# systemctl start vsftpd

# firewall-cmd --permanent --add-service=ftp
# firewall-cmd --reload

# cd /etc/pki/tls/certs
# openssl req -x509 -nodes -newkey rsa:2048 -keyout /etc/pki/tls/certs/vsftpd.pem -out /etc/pki/tls/certs/vsftpd.pem

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:JP #country code
State or Province Name (full name) []:Osaka # Region (Prefecture)
Locality Name (eg, city) [Default City]:Sakai # city
Organization Name (eg, company) [Default Company Ltd]:private # Organization Name
Organizational Unit Name (eg, section) []:Admin # Organization Name
Common Name (eg, your name or your server's hostname) [] Lepard # Server Host Name
Email Address []: # Administrator's email address

# chmod 600 vsftpd.pem

# vi /etc/vsftpd/vsftpd.conf
# Add to the last line：SSL/TLS Enable
rsa_cert_file=/etc/pki/tls/certs/vsftpd.pem
ssl_enable=YES
force_local_data_ssl=YES
force_local_logins_ssl=YES

# If you are using a passive port, add the following to the last line
# Fixed passive ports in any range of ports
pasv_enable=YES
pasv_min_port=60000
pasv_max_port=60100

# systemctl restart vsftpd

# firewall-cmd --add-port=60000-60100/tcp --permanent
success
# firewall-cmd --reload
success

# dnf -y install samba samba-client samba-common

# mkdir /home/smbshare

# groupadd smbgroup
# chgrp smbgroup /home/smbshare
# chmod 770 /home/smbshare

# vi /etc/samba/smb.conf

Lines 11-12 : 
        unix charset = UTF-8  # add
        dos charset = CP932   # add
        workgroup = SAMBA
        security = user
        # add (Allow access only from the inside)
        hosts allow = 127. 192.168.11.
# Add to the last line
# Set any share name
[Smbshare]
        # Set any share name
        path = /home/smbshare
        # Allow Write
        writable = yes
        # Do not allow guest users
        guest ok = no
        # [smbgroup] Grant access only to groups
        valid users = @smbgroup
        # Set [smbgroup] as the group for file creation
        force group = smbgroup
        # Set file creation permissions to [770].
        force create mode = 770
        # Set permissions to [770] when creating folders
        force directory mode = 770
        # Inherit permissions of upper folders
        inherit permissions = yes

# systemctl enable smb
Created symlink /etc/systemd/system/multi-user.target.wants/smb.service → /usr/lib/systemd/system/smb.service.

# systemctl start smb

# useradd smbuser
# smbpasswd -a smbuser
New SMB password:     # Password Settings
Retype new SMB password:
Added user smbuser.

# usermod -aG smbgroup smbuser

# firewall-cmd --add-service=samba --permanent
success
# firewall-cmd --reload
success