DSM on Margrop Blog

The Password Was Right—So Why Did Synology Reject It? Rebuilding DSM’s RSA + AES WebAPI Login

Sat, 11 Jul 2026 08:30:00 +0800

The short version

Some Synology WebAPI clients do more than post account and passwd to auth.cgi. The implementation preserved in OpenStack Cinder first calls SYNO.API.Encryption.getinfo, receives an RSA public modulus, server time, and two dynamic field names, then generates a one-use passphrase. RSA PKCS#1 v1.5 encrypts that passphrase; an OpenSSL-compatible AES-256-CBC envelope encrypts the URL-encoded login parameters; both Base64 values are finally placed inside the server-provided cipherkey field.

This is an authorized WebAPI compatibility technique—not a password bypass. A SID for session=DSM is also not automatically the same thing as a complete browser UI login state. Parameter encryption does not replace HTTPS, because TLS still authenticates the server and protects integrity against an active intermediary.

Stop Fighting Over the Remote: Use DSM Scheduled Tasks to Lock a Kids' Video Folder Automatically

Sun, 05 Jul 2026 06:50:00 +0800

Short version

This is not an account lockout guide. The goal is narrower and cleaner: lock one kids’ video folder on a Synology DSM 7.2.1 NAS during selected hours, while leaving the account, password, homework folders, photo folders, and other shares alone. The script inserts one temporary deny ACL entry with synoacltool, removes that entry during open windows, backs up the ACL before each change, and verifies the result after each operation.

Synology locked root behind three doors — I spent twenty minutes teaching it how to let me back in

Thu, 18 Jun 2026 16:30:00 +0800

TL;DR

Synology DSM, by design, ships with SSH disabled and root login prohibited — both sensible defaults. This guide walks you through “doing it the right way”:

Control Panel → Terminal & SNMP → Enable SSH (open the gate)

Log in as a normal user, then sudo -i to become root (borrow the landlord’s key first)

Edit /etc/ssh/sshd_config and set PermitRootLogin yes (tell the bouncer “root is family”)

synouser --setpw root xxx to set a root password, and append your public key to ~/.ssh/authorized_keys (hand back a key that can never be lost)

Total time: about twenty minutes. I’ll explain why every step exists using a “key and lock” metaphor, give you a 3-second vi crash course, list the error messages you’ll see, and answer the seven most common questions.

Moving Bedtime Out of the Living Room: Letting macOS launchd Disable Your Kids' Synology Accounts at 22:00 and Quietly Re-enable Them at 08:00

Sun, 14 Jun 2026 08:20:00 +0800

Short version

Synology DSM has a “disable this account” checkbox in the Control Panel, but it does not run on a schedule. With macOS’s built-in launchd and a 50-line bash script, you can flip the expired flag on two local accounts at 22:00 every night and flip it back at 08:00. The script does a before-query, a change, an after-query, and exit 1 the moment the after state does not match expectations. launchd writes stdout and stderr to dedicated log files. The interesting part is that the word “parent” quietly leaves the conversation: you no longer have to remind anyone to go to bed, the machine does it for you, on time, every day.

This post is not a comprehensive “family NAS management” guide. It is about one specific thing: turning a manual button click that depends on human memory into a system-level event that just happens on time.

If you only want the picture, the overview diagram in Section 2 is the whole article in one frame.

[Transfer] Synology DiskStation Administration CLI Guide: Reading Notes and Command Cheatsheet

Thu, 30 Apr 2026 18:14:05 +0800

Short version

Synology’s official CLI administration guide is not a beginner manual for the DSM web interface. It is a compact reference for scripting, automation, and system integration. The useful parts cover local users, local groups, shared folders, network configuration, service management, Windows workgroup or ADS domain settings, and DSM error numbers.

This post is an English reading note and command cheatsheet based on Synology’s official PDF, CLI Administrator Guide for Synology NAS. Because the original PDF is a copyrighted Synology document, this post does not reproduce or translate the full document verbatim. Instead, it reorganizes the material into a bilingual blog-friendly guide for quick reading and daily operations. For exact wording, parameter definitions, version-specific behavior, and legal notices, use the official PDF linked at the end.

Synology Chat download and installation address

Mon, 07 Jun 2021 08:31:39 +0800

Due to well-known reasons, Chat has now disappeared However, the international version of the Synology site can still be downloaded and used normally. Use and cherish DS3617xsInternational Version Download Center Chat Kit download address Chat Android version download address *Chat Apple users must find an overseas iCloud account to install it. The above Chat package and APK have been backed up to the download center of this site

Latest Synology 6.17: How to Gain Root Access, Set Root Password and Enable SSH Passwordless Login

Wed, 10 Feb 2021 20:40:26 +0800

1. Enable SSH Function

In 控制面板->终端机和SNMP, enable the SSH function

2. Log in to Synology via SSH Using the Default System User

My default user is admin, so I enter the following command. Modify admin and IP地址 to match your own settings.

ssh admin@192.168.1.5

Let's Encrypt automatically synchronizes Proxmox VE and DSM certificates after automatic renewal

Tue, 02 Feb 2021 19:19:38 +0800

Last time we talked about Let’s Encrypt通过DNS TXT记录来验证域名有效性, and the last part of the article was about how to use certbot renew for automatic renewal. Then the automatic renewal is successful, how to synchronize it to PVE and DSM? Below we use a script to perform automatic synchronization. Need to configure SSH password-free login on Proxmox VE and DSM servers Automatically synchronize Proxmox VE certificate Proxmox VE synchronized to this machine Proxmox VE synchronized to LAN cp /etc/letsencrypt/live/blog.

ProxmoxVE 6.3 uses commands to back up Synology virtual machines

Thu, 21 Jan 2021 18:16:22 +0800

Since the Synology virtual machine in my ProxmoxVE runs on a LUN passthrough disk, I cannot click backup directly in the Web interface. DSM virtual machine backup process: Stop the virtual machine -> Unmount the hard disk -> Back up the virtual machine -> Mount the hard disk -> Start the virtual machine It is really troublesome and error-prone to do this entirely through the Web interface. So I studied the command-line workflow.

Does Synology DSM Support QEMU Guest Agent?

Wed, 20 Jan 2021 13:19:28 +0800

Install the Power Button Package in Synology DSM and disable the qemu agent option in PVE.

Where to Download the Power Button Package

Note that DSM 6.1 and DSM 6.2 use different spk packages

img2KVM, Convert IMG Format to KVM Format, Install DSM Synology Virtual Machine

Wed, 20 Jan 2021 08:32:25 +0800

Install img2kvm

cd /root
wget -c https://download.margrop.net/d/oneindex/network/PVE/img2kvm -O img2kvm
chmod +x img2kvm

【Transfer】The latest method of half-washing Synology

Tue, 19 Jan 2021 18:10:53 +0800

I recently built a new NAS. After installing it, I found that the semi-whitewashing solution provided before no longer worked. Previous Posthttp://blog.lixx.vip/黑群晖（synology）nas-6-22-折腾记-半洗白/ Mainly because Synology’s new version of Docker 18.09.0-0506 has closed the installation of DDSM Download old version of Docker *Old version of Docker download address (Docker-x64-17.05.0-0401.spk): DDSM’s PAT download address (DSM_VirtualDSM_15284.pat): It can also be downloaded at 我的网盘 You need to uninstall the newly installed Docker in the package center, and then install the downloaded old version

How to Run N2N on Synology (DSM) - Compilation Guide

Fri, 15 Jan 2021 13:18:07 +0800

Synology (abbreviated as DSM below) is currently the most famous NAS system, bar none. How to run N2N directly on DSM? Of course, cross-compilation is needed again 😂. The following cross-compilation operations require a basic understanding of Linux and proficiency in vim operations.