Thank you so much for the link.
We have done that, except we didn't create the group... i.e. we match the user ,instead of group...
There's no error in /var/log/secure. However, we can't connect in FileZilla.
Wonder what else did we missed, or which other file(s) should we look at for any...