How to determine variable/attribute name?

Alexander Harm contact at aharm.de
Thu Apr 4 16:02:45 CEST 2019


Hi, Synology's Radius Server is actually FreeRADIUS 3.0.15. Unfortunately they use their own "rlm_synorad" to block/deny access for specific users/groups.

This is the debug output of a small test:

synorad: Full name[REALM\user.name]
synorad: block list[]
synorad: block list[REALM\\Domain Guests]
synorad: group[REALM\Group Policy Creator Owners], blockList[REALM\Domain Guests]
synorad: group[REALM\ka.hq.all], blockList[REALM\Domain Guests]
synorad: group[REALM\DnsAdmins], blockList[REALM\Domain Guests]
synorad: group[REALM\Domain Users], blockList[REALM\Domain Guests]
synorad: group[REALM\Denied RODC Password Replication Group], blockList[REALM\Domain Guests]
synorad: group[REALM\ka.hq.portal], blockList[REALM\Domain Guests]
synorad: group[REALM\AAD DC Administrators], blockList[REALM\Domain Guests]

I was wondering if there is any way of determining the variable/attribute name the group information is stored in? I would like to do something like this in the users file:

DEFAULT Synorad_Group == "REALM\ka.hq.all"
Does anyone have an idea?

I tried -X and -Xxxx but it doesn't give me more information.

Alexander



More information about the Freeradius-Users mailing list