How to determine variable/attribute name?

Alan DeKok aland at deployingradius.com
Thu Apr 4 16:05:04 CEST 2019



> On Apr 4, 2019, at 10:02 AM, Alexander Harm <contact at aharm.de> wrote:
> 
> Hi, Synology's Radius Server is actually FreeRADIUS 3.0.15. Unfortunately they use their own "rlm_synorad" to block/deny access for specific users/groups.

  That's common for companies to do.

> This is the debug output of a small test:
> 
> synorad: Full name[REALM\user.name]
> synorad: block list[]
> synorad: block list[REALM\\Domain Guests]
> synorad: group[REALM\Group Policy Creator Owners], blockList[REALM\Domain Guests]
> synorad: group[REALM\ka.hq.all], blockList[REALM\Domain Guests]
> synorad: group[REALM\DnsAdmins], blockList[REALM\Domain Guests]
> synorad: group[REALM\Domain Users], blockList[REALM\Domain Guests]
> synorad: group[REALM\Denied RODC Password Replication Group], blockList[REALM\Domain Guests]
> synorad: group[REALM\ka.hq.portal], blockList[REALM\Domain Guests]
> synorad: group[REALM\AAD DC Administrators], blockList[REALM\Domain Guests]
> 
> I was wondering if there is any way of determining the variable/attribute name the group information is stored in? I would like to do something like this in the users file:
> 
> DEFAULT Synorad_Group == "REALM\ka.hq.all"
> Does anyone have an idea?

  Ask Synology how their software works.  Sorry, but that's the only answer here.

  Alan DeKok.




More information about the Freeradius-Users mailing list