Implement Get/Set-LockoutPolicy cmdlets

Modules/VMware.vSphere.SsoAdmin/VMware.vSphere.SsoAdmin.psm1

@@ -940,4 +940,156 @@ function Set-PasswordPolicy {
       }
    }
 }
+#endregion
+
+#region LockoutPolicy cmdlets
+function Get-LockoutPolicy {
+<#
+   .NOTES
+   ===========================================================================
+   Created on:   	9/30/2020
+   Created by:   	Dimitar Milov
+    Twitter:       @dimitar_milov
+    Github:        https://github.com/dmilov
+   ===========================================================================
+   .DESCRIPTION
+   This function gets lockout policy.
+
+   .PARAMETER Server
+   Specifies the vSphere Sso Admin Server on which you want to run the cmdlet.
+   If not specified the servers available in $global:DefaultSsoAdminServers variable will be used.
+
+   .EXAMPLE
+   Get-LockoutPolicy
+
+   Gets lockout policy for the server connections available in $global:defaultSsoAdminServers
+#>
+[CmdletBinding()]
+ param(
+   [Parameter(
+      Mandatory=$false,
+      ValueFromPipeline=$false,
+      ValueFromPipelineByPropertyName=$false,
+      HelpMessage='Connected SsoAdminServer object')]
+   [ValidateNotNull()]
+   [VMware.vSphere.SsoAdminClient.DataTypes.SsoAdminServer]
+   $Server)
+
+   Process {
+      $serversToProcess = $global:DefaultSsoAdminServers
+      if ($Server -ne $null) {
+         $serversToProcess = $Server
+      }
+      foreach ($connection in $serversToProcess) {
+         if (-not $connection.IsConnected) {
+            Write-Error "Server $connection is disconnected"
+            continue
+         }
+
+         $connection.Client.GetLockoutPolicy();
+      }
+   }
+}
+
+function Set-LockoutPolicy {
+<#
+   .NOTES
+   ===========================================================================
+   Created on:   	9/30/2020
+   Created by:   	Dimitar Milov
+    Twitter:       @dimitar_milov
+    Github:        https://github.com/dmilov
+   ===========================================================================
+   .DESCRIPTION
+   This function updates lockout policy settings.
+
+   .PARAMETER LockoutPolicy
+   Specifies the LockoutPolicy instance which will be used as original policy. If some properties are not specified they will be updated with the properties from this object.
+
+   .PARAMETER Description
+
+   .PARAMETER AutoUnlockIntervalSec
+
+   .PARAMETER FailedAttemptIntervalSec
+
+   .PARAMETER MaxFailedAttempts
+
+   .EXAMPLE
+   Get-LockoutPolicy | Set-LockoutPolicy -AutoUnlockIntervalSec 15 -MaxFailedAttempts 4
+
+   Updates lockout policy auto unlock interval seconds and maximum failed attempts
+#>
+[CmdletBinding()]
+ param(
+   [Parameter(
+      Mandatory=$true,
+      ValueFromPipeline=$true,
+      ValueFromPipelineByPropertyName=$false,
+      HelpMessage='LockoutPolicy instance you want to update')]
+   [VMware.vSphere.SsoAdminClient.DataTypes.LockoutPolicy]
+   $LockoutPolicy,
+
+   [Parameter(
+      Mandatory=$false,
+      ValueFromPipeline=$false,
+      ValueFromPipelineByPropertyName=$false,
+      HelpMessage='LockoutPolicy description')]
+   [string]
+   $Description,
+
+   [Parameter(
+      Mandatory=$false,
+      ValueFromPipeline=$false,
+      ValueFromPipelineByPropertyName=$false)]
+   [Nullable[System.Int64]]
+   $AutoUnlockIntervalSec,
+
+   [Parameter(
+      Mandatory=$false,
+      ValueFromPipeline=$false,
+      ValueFromPipelineByPropertyName=$false)]
+   [Nullable[System.Int64]]
+   $FailedAttemptIntervalSec,
+
+   [Parameter(
+      Mandatory=$false,
+      ValueFromPipeline=$false,
+      ValueFromPipelineByPropertyName=$false)]
+   [Nullable[System.Int32]]
+   $MaxFailedAttempts)
+
+   Process {
+
+      foreach ($lp in $LockoutPolicy) {
+
+         $ssoAdminClient = $lp.GetClient()
+         if ((-not $ssoAdminClient)) {
+            Write-Error "Object '$lp' is from disconnected server"
+            continue
+         }
+
+         if ([string]::IsNullOrEmpty($Description)) {
+            $Description = $lp.Description
+         }
+
+         if ($AutoUnlockIntervalSec -eq $null) {
+            $AutoUnlockIntervalSec = $lp.AutoUnlockIntervalSec
+         }
+
+         if ($FailedAttemptIntervalSec -eq $null) {
+            $FailedAttemptIntervalSec = $lp.FailedAttemptIntervalSec
+         }
+
+         if ($MaxFailedAttempts -eq $null) {
+            $MaxFailedAttempts = $lp.MaxFailedAttempts
+         }
+
+         $ssoAdminClient.SetLockoutPolicy(
+           $Description,
+           $AutoUnlockIntervalSec,
+           $FailedAttemptIntervalSec,
+           $MaxFailedAttempts);
+      }
+   }
+}
 #endregion