FileZilla Server supports the creation of users and groups. One user can belong to more than one group (see the Groups section), and the order in which groups are listed is significant.
You can set the following properties:
- Whether a user is enabled
- Which kind of credentials must be used to log in
- Which groups a user belongs to
- Mount points
- Filters
- Speed limits
Editing users
To edit a user, select it from the list on the left of the Users panel. Then, on the right side ofthe Users panel tabs you find three tabs:
- The General tab allows you to edit whether a user is enabled, their credentials, which groups the user belongs to, the mount points and optionally a description.
- The Filters tab allows you to edit the user’s filters.
- The Speed limits tab allows you to edit the user’s speed limits.
To create a new user, click on the Add button at the bottom of the list on the left of the Users panel. (See How to Create a User in FileZilla Pro Enterprise Server)
To rename a user, select it in the list on the left of the Users panel, then click on the Remove button.
To duplicate a user, select it in the list on the left of the Users panel, then click on the Duplicate button.
To remove a user, select it in the list on the left of the Users panel, then click on the Remove button.
Enabling a user
In the General tab, the User is enabled checkbox allows you to enable or disable the user. A disabled user will be denied access to FileZilla Server. Disabling a connected user, will result in the session being killed.
Editing user’s credentials
You can set which credentials will be used to allow the user to log in, among these three options:
- Do not require a password to log in
- Require a password to log in
- Use system credentials to log in
Make sure to communicate the password to the user through a secure channel.
Use system credentials to log in makes FileZilla Server delegate credential checks to the operating system it’s running on. In this case, if you also select the use system credentials also for accessing files and directories checkbox, then the user will be granted the same access privileges that are associated with their host operating system account, although these might be further restricted by the mount points.
Note: the special user
Editing the groups a user belongs to
Users can belong to one or more groups. To add a user to a group, click on the dropdown menu labeled Member of groups and select the desired group. With the Up and Down buttons on the right of the menu you can change the order in which groups are selected.
Groups and users belonging to such groups might define the same mount points, it is important to understand how that works.
If the same mount point is defined both for a user and for any of the groups they belong to, FileZilla Server will use the one set for the user. If a mount point is defined in more than one group the user belongs to, FileZilla Server will use the mount point of the group that comes first, in the list of the groups the user belongs to.
The download and upload limits that apply to a user are the minimum of all the limits specified for that user and the groups the user belongs to.
The filters that apply to a user are defined as the union of all the filters associated with that user and the groups the user belongs to.
Editing mount points
Editing user’s mount points works as it works for the groups. Please, refer to the section Editing mount points to learn how to edit mount points.
Editing filters
FileZilla Server implements IP-based filtering, to allow only certain connections and/or disallow others, based on whether the connecting IP address matches the addresses or range of addresses within the two lists.
- The Disallowed IP ranges list contains all those IPs that, if matched, will not allow the connection.
- The Allowed IP ranges list contains all those IPs that, if matched, will allow the con-
nection. Note that if an IP belongs both to the disallowed and the allowed IP ranges, it will be allowed.
The lists can contain single IP address, or IP ranges in the CIDR Notation, or IP ranges in the interval form, both IPv4 and IPv6: for example, the range 192.168.0.2-192.168.0.30 defines a closed interval that includes all the IP addresses going from 192.168.0.2 to 192.168.0.30.
Using the asterisk ‘*’ character is equivalent to entering the numbers from 0 to 255.
If both lists are left empty, then no filtering is applied and all connections are allowed.
Please, refer to the Editing Filters section to learn how to edit filters.
Editing the speed limits
Editing user’s speed limits works as it works for the groups.
Please, refer to the Editing the Speed Limits section to learn how to edit speed limits.
The video tutorial below shows how to configure FileZilla Server’s user types and how to use placeholders to define native paths.