Issue with vsftpd in Suse

Linux and Unix-Like Linux
1

Hi,
I have SUSE LINUX Enterprise Server 9. One of (non-root) user ia facing very strange issue and I am not able to fix it. He is able to cd into a directory when he logged in through OS ssh, but can not do so when he do ftp. I am using vsftpd.

root@prod_ftp_ser03:/> su - don
prod_ftp_ser03: /home/don
(tty/dev/pts/4): bash: 53 > ls -l
total 0
lrwxrwxrwx  1 don cadd 11 2013-09-09 11:11 cad1 -> /disks/cad1
prod_ftp_ser03: /home/don
(tty/dev/pts/4): bash: 53 > cd cad1
prod_ftp_ser03: /home/don/cad1
(tty/dev/pts/4): bash: 54 > ls -l
total 3
drwxrwsr-x  37 antal cadd 1336 2013-08-07 13:27 CADD Engineering
drwsrwsrwx  59 antal cadd 2328 2013-09-04 15:40 Engineering Folders
prod_ftp_ser03: /home/don/cad1
(tty/dev/pts/4): bash: 55 > exit
logout
root@prod_ftp_ser03:/> ftp 0
Connected to 0.
220 Welcome to CADD Storage FTP service.
Name (0:root): don
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> ls -l
229 Entering Extended Passive Mode (|||45442|)
150 Here comes the directory listing.
lrwxrwxrwx    1 24668    55564          11 Sep 09 18:11 cad1 -> /disks/cad1  ----------------------------> 24668 is UID of don
226 Directory send OK.
ftp> cd cad1
550 Failed to change directory.             ----------------------------> Here it failed to go inside directory, which is link to a directory
ftp> bye
221 Goodbye.
root@prod_ftp_ser03:/>
2

I don't use SuSE at all, but can it be an SELinux problem?

ls -Z

on the directory.

3

It says

root@prod_ftp_ser03:~> ls -Z /home/don
Sorry, this option can only be used on a SELinux kernel.
4

I wonder if this is a chroot issue. A lot of people jail ftp user accounts and this could be why there is a diffence in the ftp and
ssh behavior. Is the soflink in a different file system? This looks
like a possible ftp security issue that can be resolved with the correct setting. Look in the log files of the ftp server to see more information.

5

I do not see any ftp related error in messages file. Yes, /disks/cad1 is a different file-system and cad1 is a link to that file-system.

root@prod_ftp_ser03:~> su - don
prod_ftp_ser03: /home/don
(tty/dev/pts/2): bash: 57 > ls -l
total 0
lrwxrwxrwx  1 don cadd 11 2013-09-09 11:11 cad1 -> /disks/cad1
prod_ftp_ser03: /home/don
(tty/dev/pts/2): bash: 58 > df -h /disks/cad1
Filesystem            Size  Used Avail Use% Mounted on
/dev/emcpowera1       500G  420G   81G  84% /disks/cad1
prod_ftp_ser03: /home/don
(tty/dev/pts/2): bash: 60 > ls
cad1
prod_ftp_ser03: /home/don
(tty/dev/pts/2): bash: 61 > df -h .
Filesystem            Size  Used Avail Use% Mounted on
/dev/cciss/c0d0p2     133G  104G   29G  79% /
prod_ftp_ser03: /home/don
(tty/dev/pts/2): bash: 62 > cd cad1
prod_ftp_ser03: /home/don/cad1
(tty/dev/pts/2): bash: 63 > df -h .
Filesystem            Size  Used Avail Use% Mounted on
/dev/emcpowera1       500G  420G   81G  84% /disks/cad1
prod_ftp_ser03: /home/don/cad1

I have root access. Can I check anything else ? This was working till last friday and it is not a new setup, but not sure, what was changed and it is broke.