vsftpd does not list content of a directory

Question

I have set up a FTP server using vsftpd and enabled anonymous upload and download. The problem I have is that when I upload a directory it will be uploaded successfully (I can see it in server), but the next time I want to check that directory, FTP client shows an empty directory!!

There is no error logged in /var/log/vsftpd.log. The pub folder (home folder for anonymous ftp user) has also write permission. I tested various config options but none helped!

The latest config options I set are like below:

anonymous_enable=YES
local_enable=YES
write_enable=YES
anon_upload_enable=YES
anon_mkdir_write_enable=YES
anon_other_write_enable=YES
dirlist_enable=YES

I even turned off firewall once for testing it, but it didn't change anything!

Answer 1

Two suggestions:

1. Does whatever user ID that will run FTP have "write" permissions on the "root" directory that vsftpd will use as its current working directory? vsftpd doesn't want a writable working directory.

2. The vsftpd.conf file can have a hide_file directive. Depending on the regular expression specified by that directive, anonymous users might not be allowed to see any files.

I've had this problem with vsftpd in the past, and I recall having a vsftpd.conf setting that caused it, so read that config file closely, understand all the params and their values.

Answer 2

Thanks to user81029 for pointing out

sudo setsebool -P allow_ftpd_full_access 1

solves the issue with empty ftp directory after mount --bind a folder into /var/ftp/ on SELinux

Answer 3

If your config is correct and it's not a firewall issue it could well be SELinux, in my case it was and the answer was:

setsebool -P allow_ftpd_full_access 1

From the man page:

If you want to allow ftp servers to login to local users and read/write all files on the system, governed by DAC, you must turn on the allow_ftpd_full_access boolean

Answer 4

I just forced my VSFTPD to run only in active mode and that seemed to have worked for me. To do that put the following line in your config file:

pasv_enable=NO

What I ended up doing, though, was enabling the passive mode as for some applications it appeared to have been a requirement. It looks like VSFTPD does not play with defaults nicely so it is best to specify your preference explicitly:

pasv_enable=YES

It is also important to get up the correct iptables settings if you are running a firewall. Here are mine, extracted from my /etc/sysconfig/iptables file:

# FTP
-A INPUT -m state --state NEW -m tcp -p tcp --dport 20 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 1024:65535 -j ACCEPT

Answer 5

Have you considered adding hide_file=NO?

Answer 6

In /etc/vsftpd.conf set seccomp_sandbox=NO

Fixed this for me, reported as https://bugzilla.opensuse.org/show_bug.cgi?id=1173275

Answer 7

A possible solution for anybody on a private LAN

I also had VSFTPD establishing an SSL passive connection but as soon as Filezilla sent the LIST command for the directory listing, it would time out. VSFTPD logs showed this error:

[userftp] DEBUG: Client "x.x.x.x", "Control connection terminated without SSL shutdown."

My problem was that I was on the same private LAN as my FTP server. This meant both my client machine and the server had the same public IP. Presumably my router was trying to redirect FTP responses from the server, back to the server because of my port forwards. My router doesn't allow for incoming/outgoing config, just PORT>IP. My solution was simple; turn on the VPN on my client machine. The same VPN I had turned off specifically to save it causing me trouble while configuring VSFTPD [facepalm]. This gave my client machine a different public IP therefore allowing my router to differentiate between the client and server machines and route server responses accordingly.

Of course another solution would be to use local IP addresses, but I wanted to tighten up a passive config that would work from anywhere.

Answer 8

if SELinux is enabled, have you tried setenforce 0 command? Note, it temporarily enters into permissive mode.

Answer 9

I know you 've tried to disabled your firewall and this solution is not applicable to you but this could help someone else

In my case I had to allow BOTH port 20 and 21

ufw allow ftp

AND

ufw allow 20/tcp

Answer 10

If you have tried to list directories by using commands like ls, dir that will not help.

If you use any GUI FTP client, for example filezilla, all directories will be shown.