PowerCLI-Example-Scripts/Modules/VMware.vSphere.SsoAdmin/PasswordPolicy.ps1

<#
Copyright 2021 VMware, Inc.
SPDX-License-Identifier: BSD-2-Clause
#>

function Get-SsoPasswordPolicy {
    <#
       .NOTES
       ===========================================================================
       Created on:   	9/30/2020
       Created by:   	Dimitar Milov
        Twitter:       @dimitar_milov
        Github:        https://github.com/dmilov
       ===========================================================================
       .DESCRIPTION
       This function gets password policy.

       .PARAMETER Server
       Specifies the vSphere Sso Admin Server on which you want to run the cmdlet.
       If not specified the servers available in $global:DefaultSsoAdminServers variable will be used.

       .EXAMPLE
       Get-SsoPasswordPolicy

       Gets password policy for the server connections available in $global:defaultSsoAdminServers
    #>
    [CmdletBinding()]
    param(
        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false,
            HelpMessage = 'Connected SsoAdminServer object')]
        [ValidateNotNull()]
        [VMware.vSphere.SsoAdminClient.DataTypes.SsoAdminServer]
        $Server)

    Process {
        $serversToProcess = $global:DefaultSsoAdminServers.ToArray()
        if ($Server -ne $null) {
            $serversToProcess = $Server
        }
        try {
            foreach ($connection in $serversToProcess) {
                if (-not $connection.IsConnected) {
                    Write-Error "Server $connection is disconnected"
                    continue
                }

                $connection.Client.GetPasswordPolicy();
            }
        }
        catch {
            Write-Error (FormatError $_.Exception)
        }
    }
}

function Set-SsoPasswordPolicy {
    <#
       .NOTES
       ===========================================================================
       Created on:   	9/30/2020
       Created by:   	Dimitar Milov
        Twitter:       @dimitar_milov
        Github:        https://github.com/dmilov
       ===========================================================================
       .DESCRIPTION
       This function updates password policy settings.

       .PARAMETER PasswordPolicy
       Specifies the PasswordPolicy instance which will be used as original policy. If some properties are not specified they will be updated with the properties from this object.

       .PARAMETER Description

       .PARAMETER ProhibitedPreviousPasswordsCount

       .PARAMETER MinLength

       .PARAMETER MaxLength

       .PARAMETER MaxIdenticalAdjacentCharacters

       .PARAMETER MinNumericCount

       .PARAMETER MinSpecialCharCount

       .PARAMETER MinAlphabeticCount

       .PARAMETER MinUppercaseCount

       .PARAMETER MinLowercaseCount

       .PARAMETER PasswordLifetimeDays

       .EXAMPLE
       Get-SsoPasswordPolicy | Set-SsoPasswordPolicy -MinLength 10 -PasswordLifetimeDays 45

       Updates password policy setting minimum password length to 10 symbols and password lifetime to 45 days
    #>
    [CmdletBinding()]
    param(
        [Parameter(
            Mandatory = $true,
            ValueFromPipeline = $true,
            ValueFromPipelineByPropertyName = $false,
            HelpMessage = 'PasswordPolicy instance you want to update')]
        [VMware.vSphere.SsoAdminClient.DataTypes.PasswordPolicy]
        $PasswordPolicy,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false,
            HelpMessage = 'PasswordPolicy description')]
        [string]
        $Description,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $ProhibitedPreviousPasswordsCount,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MinLength,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MaxLength,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MaxIdenticalAdjacentCharacters,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MinNumericCount,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MinSpecialCharCount,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MinAlphabeticCount,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MinUppercaseCount,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $MinLowercaseCount,

        [Parameter(
            Mandatory = $false,
            ValueFromPipeline = $false,
            ValueFromPipelineByPropertyName = $false)]
        [Nullable[System.Int32]]
        $PasswordLifetimeDays)

    Process {

        try {
            foreach ($pp in $PasswordPolicy) {

                $ssoAdminClient = $pp.GetClient()
                if ((-not $ssoAdminClient)) {
                    Write-Error "Object '$pp' is from disconnected server"
                    continue
                }

                if ([string]::IsNullOrEmpty($Description)) {
                    $Description = $pp.Description
                }

                if ($ProhibitedPreviousPasswordsCount -eq $null) {
                    $ProhibitedPreviousPasswordsCount = $pp.ProhibitedPreviousPasswordsCount
                }

                if ($MinLength -eq $null) {
                    $MinLength = $pp.MinLength
                }

                if ($MaxLength -eq $null) {
                    $MaxLength = $pp.MaxLength
                }

                if ($MaxIdenticalAdjacentCharacters -eq $null) {
                    $MaxIdenticalAdjacentCharacters = $pp.MaxIdenticalAdjacentCharacters
                }

                if ($MinNumericCount -eq $null) {
                    $MinNumericCount = $pp.MinNumericCount
                }

                if ($MinSpecialCharCount -eq $null) {
                    $MinSpecialCharCount = $pp.MinSpecialCharCount
                }

                if ($MinAlphabeticCount -eq $null) {
                    $MinAlphabeticCount = $pp.MinAlphabeticCount
                }

                if ($MinUppercaseCount -eq $null) {
                    $MinUppercaseCount = $pp.MinUppercaseCount
                }

                if ($MinLowercaseCount -eq $null) {
                    $MinLowercaseCount = $pp.MinLowercaseCount
                }

                if ($PasswordLifetimeDays -eq $null) {
                    $PasswordLifetimeDays = $pp.PasswordLifetimeDays
                }

                $ssoAdminClient.SetPasswordPolicy(
                    $Description,
                    $ProhibitedPreviousPasswordsCount,
                    $MinLength,
                    $MaxLength,
                    $MaxIdenticalAdjacentCharacters,
                    $MinNumericCount,
                    $MinSpecialCharCount,
                    $MinAlphabeticCount,
                    $MinUppercaseCount,
                    $MinLowercaseCount,
                    $PasswordLifetimeDays);
            }
        }
        catch {
            Write-Error (FormatError $_.Exception)
        }
    }
}