Xlight FTP Server Help Document

Frequently Asked Questions (FAQ)


1. How to upgrade FTP server 

Before upgrading, you must stop the running FTP Server. If FTP Server is running as a system service, you need to go to "Control Panel->Manage Tools->Service", find and select "Xlight FTP Server" in the service window, click the mouse right button, select "Stop" from PopupMenu and then close the service window. Then you can choose either one of the following methods:

2. How to backup Xlight configuration files

Under the Xlight FTP server installation folder ("c:\program files\xlight"), there are 5 files: "ftpd.hosts","ftpd.option","ftpd.password", "ftpd.rules"."ftpd.users". These are configuration files of the Xlight FTP server. For server configuration, you only need to back up these 5 files. If you use the quotas function in the Xlight FTP server, you may also need to backup the file ".quota" in the same directory.

From the Xlight FTP Server version 3.2 and above, there is a new option to automatically backup configuration files. The option is at [Global Option]->[General]->[Backup After Configuration Change]. You need to select a destination directory for storing configuration backup.

3. How to input IP ranges

There are three ways to input IP address ranges in Xlight FTP Server. 1. You can use character * to represent IP range 192.168.0.1 - 192.168.0.255 as 192.168.0.* . 2. You can set IP range directly, such as 192.168.1.15 - 192.168.1.45. 3. You can use a subnet mask such as 192.168.0.1/24 or 192.168.0.1/255.255.255.0.

4. How to use Xlight FTP Server in Windows 98

Xlight FTP Server is complied with the SSPI. While SSPI function DecryptMessage() call used by Xlight FTP Server for SSL is not supported by default in Windows 98. For Xlight to work in Windows 98, the user has to install Microsoft's Active Directory Client Extension (DSClient) For Windows 9x. The DSClient can be found in Windows 2000 server CD-Rom (under Client\Win9x\DSclient.exe), or can be downloaded from address http://www.Xlightftpd.com/download/Dsclient.exe

5. How to use localize Xlight FTP Server

Xlight FTP Server can be localized to any language easily. Inside the "lang" folder of the Xlight FTP installation path (by default, it is c:\program files\Xlight), you can find the file "language_en.ini". Open this file, and translate words at the right of = to your language. Then rename this file to "language.ini". After reloading Xlight FTP program, the UI and FTP response will be localized in your own language. If you wish to contribute your own translation and let other people in your country to use your translation, send us the translation file, we will be happy to include it with the new version of Xlight FTP.

6. How to use IPv6 in Xlight FTP Server

You have to install the IPv6 protocol stack for Windows. IPv6 protocol stack is provided in Windows XP and 2003, but by default, it is not installed. After the IPv6 protocol stack is installed, you will be able to see and choose the item "Dynamic IP(IPv6)" when adding a new virtual server. If you have set the SITE or GLOBAL IPv6 address for the NIC, it will also be shown in the Server Network Interface window (Note: SITE or GLOBAL IPv6 address of NIC will not be showed in the Server Network Interface window, when using Windows 2000 IPv6 preview, because some essential APIs are not implemented in IPv6 preview).

7. How to run Xlight FTP Server System Service using non-admin account

Normally you should run Xlight FTP Server System Service using an account from the "Local Administrators" group. But if you want to run it using a non-admin account, you need to set up the following:

For example. if you have a "test" user who belongs to the "Standard User" group, and you want a "test" user to run Xlight FTP server System Service.

1. The "test" account must be able to read and write Xlight FTP configuration files. There are 5 files: "ftpd.hosts","ftpd.option","ftpd.password", "ftpd.rules"."ftpd.users", you must give "test" user Full Control to those files.

For security reasons, from 3.9.2.5, Xlight FTP configuration files created can only be accessed by Administrators and the owner (the user who modified those files).

If you configured Xlight FTP before, opened Xlight GUI and cannot see any old settings. It could be that the current user is not the owner of those files. You need to change the owner to those files.

When Xlight is running as a System Service, configuration files will be modified only by Xlight FTP Service. The account running Xlight FTP service will be the owner of those files. The Xlight FTP GUI (Admin Console) needs the Administrator right to run, but will not modify them.

You must also give the "test" user Full Control of the folder where the Xlight FTP Server program resides, otherwise, there will be an error for Xlight GUI (Admin Console) talking to the Xlight service program.

2. You need to modify Service Permission to allow the "test" user to start and stop service. You can use Sysinternals Process Explorer to modify Service Permissions.

3. If you use the SSL function, you need to give the user "test" Read access to the private key of the certificate. Launch MMC, add/remove Snapin and choose certificates. Find the correct certificate in the "Local Computer" group. Select it, right-click and choose "Properties > Manage Private Keys…". Add read permission for the "test" user.

If you are still using an old Windows Server OS, and cannot see the above menu. You may need to use "WinHttpCertCfg.exe" to allow the user access private key of the certificate. You can check the Microsoft link for how to download and use it

4. If you want to use the SSH2/SFTP function, you need to give the user "test" Read access to the SSH host key. Goto folder "C:\ProgramData\Microsoft\Crypto" or "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto" or depending on the OS, the other place where the Microsoft Crypto Machine key is stored.

For the RSA SSH host key, go to sub-folder "RSA\MachineKeys", for the DSS SSH host key, go to sub-folder "DSS\MachineKeys". There may be several files under it, each file is related to one machine key. You can not tell which file is the SSH host key used by Xlight FTP by its name.

You need to find the file used by the Xlight FTP Server and give the "test" user Read permission. If you know the time the Xlight SSH host key is created or imported, then you can use it as a hint to find the correct file. If you don't know the time the SSH host key is created, you can try to give the user "test" read permission to one file at a time, then make an SFTP connection to the Xlight FTP Server and check if there is any error. If you can make an SFTP connection without any error, then you find the correct file.