Try to use Filezilla with implicit and force port to 21. To use Total Commander, make sure you installed OpenSSL binaries that are not part of TC installation.

I tried to login with my test account without success. You probably can find cause in your log file. My guess is that www-data UID is lower that 2000 and thus denied (as per your option -u 2000).

Tried with this result

16:25:10 Status:    Connection established, initializing TLS...
16:25:11 Error:    GnuTLS error -9: A TLS packet with unexpected length was received.
16:25:11 Error:    Could not connect to server

I did install OpenSSL binaries before I tried.

I changed it to -u 30 as www-data is 33

R.

Strange, still auth failed. Could I see how my row in table looks like? What does it write in log right now? Is it able to connect to the database? Does my folder exists?

Any such error would cause authentication problem.

/var/log/messages

Sep 24 16:51:20 server pure-ftpd: (?@xx.xx.xx.xx) [INFO] SSL/TLS: Enabled TLSv1/SSLv3 with DHE-RSA-AES256-SHA, 256 secret bits cipher
Sep 24 16:51:26 server pure-ftpd: (?@xx.xx.xx.xx) [WARNING] Authentication failed for user [drake127]
Sep 24 16:51:41 server pure-ftpd: (?@x.xx.xx.xx) [WARNING] Authentication failed for user [drake]

and

mysql> select * from ftp_users where user = "drake";
+-------+----------------------------------+------------+----------+----------+
| user  | password                         | directory  | uid      | gid      |
+-------+----------------------------------+------------+----------+----------+
| drake | 2851a862c810901fb50717a9d01075e8 | /tmp/drake | www-data | www-data |
+-------+----------------------------------+------------+----------+----------+

and

www-data:x:33:33:www-data:/var/www:/bin/sh

big THANX to drake127 for helping me out. It is wooooorking now.

I guest I didn't specify correct ip for pure-ftpd to listen on.

R