Page 1 of 1

Import User

Posted: 2020-12-23 19:00
by phil22

I make a new FileZilla Server
I will want to import the users from the old server. I saw other topics, however not like my problem
I saw that the file where the users were stored
FileZilla Server.xml
In the old file, there is just the "Pass" field to enter
On the new server, on which there are already users, there is the field in addition to the field "Salt"

If I copy the old users to the new file, the server doesn't see them.
I restarted the server with no effects

The server versions are the same 0.9.58 beta

Thanks for your help

Re: Import User

Posted: 2020-12-24 01:05
by boco
We only support the latest version, which is 0.9.60.x at this time.

Re: Import User

Posted: 2020-12-27 19:06
by phil22

I updated to version 9.60 the 2 servers and I have the same problem


Re: Import User

Posted: 2020-12-28 07:29
by boco
The way password hashes are stored was modernized, from plain MD5 hash to salted SHA512 hash. The server is still backwards compatible to the old scheme.

Migrating the old <user></user> blocks to the new XML file works (I've done it), provided all XML tags have been copied along correctly, and the XML document is still well formed. Of course, the passwords will still be stored in the old, insecure way, until you edit and re-save the user.

Re: Import User

Posted: 2020-12-28 12:24
by phil22

Yes i take a block <user></user> of the old server of the file FileZilla Server.xml and copy the block into the <Users> block of the new server
exemple :
<User Name="Myolduser">
<Option Name="Pass">itsanexample123456............</Option>
<Option Name="Salt"></Option>

And the new server, after restart don't see my user "Myolduser"

Re: Import User

Posted: 2020-12-28 17:42
by phil22
i deleted a user in the new Server Of the file
c:\Program Files (x86)\FileZilla Server\filezilla Server.xml
Restart by service Filezilla, the user is always seen...

i try to delete files filezilla Server.xml in
C:\Users\***\AppData\Local\VirtualStore\Program Files (x86)\FileZilla Server

with no sucess

Re: Import User

Posted: 2020-12-29 09:03
by botg
Which program are you using to edit the files? As they are in a privileged location, make sure to run your editor elevated.

Re: Import User

Posted: 2020-12-29 17:28
by phil22

i use ConText to edit the file
it's ok by opening Context with administrator rights

I edit a user and Ok but
The "Pass" field is always empty, normal ?

Re: Import User

Posted: 2020-12-31 08:34
by botg
The pass field shouldn't be empty.

Re: Import User

Posted: 2021-01-02 08:29
by boco
The last ConText version is from 2009, are you sure it's fully UAC-compatible? If not, any saved XML file will likely be redirected to the Virtual Store location and you will need to move it to the correct location by yourself.

While Pass should never be empty, please note that passwords aren't stored at all. FileZilla Server stores only a salted SHA512 hash of the password, the length of the obscured password field shown in the GUI will therefore always be the same, even if the passwords weren't of same length.