Fix: fixed Update-VcenterRootPasswordExpiration to handle empty email string

Description:
Fixed `Update-VcenterRootPasswordExpiration` to handle empty email string

ref: #171

Signed-off-by: Sowjanya.V <[email protected]>

Author: sowjuec

CHANGELOG.md

@@ -17,6 +17,7 @@ Bugfix:
 - Fix for missing account lockout policy data for SDDC Manager and vCenter Server. [GH-160](https://github.com/vmware/powershell-module-for-vmware-cloud-foundation-password-management/pull/160)
 - Fix for `VMware.PowerCLI` module name not being mentioned in the required modules list of the manifest file. [GH-170](https://github.com/vmware/powershell-module-for-vmware-cloud-foundation-password-management/pull/170)
 - Fix for `Test-VcfPasswordManagementPrereq` not working while multiple module versions were present. [GH-174](https://github.com/vmware/powershell-module-for-vmware-cloud-foundation-password-management/pull/174)
+- Fix for `Update-VcenterRootPasswordExpiration` to handle empty email string. [GH-177](https://github.com/vmware/powershell-module-for-vmware-cloud-foundation-password-management/pull/177)
 
 ## v1.7.1
 

VMware.CloudFoundation.PasswordManagement.psd1

@@ -11,7 +11,7 @@
     RootModule        = '.\VMware.CloudFoundation.PasswordManagement.psm1'
 
     # Version number of this module.
-    ModuleVersion     = '1.7.2.1004'
+    ModuleVersion     = '1.7.2.1005'
 
     # Supported PSEditions
     # CompatiblePSEditions = @()

VMware.CloudFoundation.PasswordManagement.psm1

@@ -4604,14 +4604,13 @@ Function Update-VcenterRootPasswordExpiration {
         [Parameter (Mandatory = $true)] [ValidateNotNullOrEmpty()] [String]$user,
         [Parameter (Mandatory = $false)] [ValidateNotNullOrEmpty()] [String]$pass,
         [Parameter (Mandatory = $true)] [ValidateNotNullOrEmpty()] [String]$domain,
-        [Parameter (Mandatory = $false, ParameterSetName = 'expire')] [ValidateNotNullOrEmpty()] [String]$email,
+        [Parameter (Mandatory = $false, ParameterSetName = 'expire')] [String]$email,
         [Parameter (Mandatory = $false, ParameterSetName = 'expire')] [ValidateNotNullOrEmpty()] [String]$maxDays,
         [Parameter (Mandatory = $false, ParameterSetName = 'expire')] [ValidateNotNullOrEmpty()] [String]$warnDays,
         [Parameter (Mandatory = $false, ParameterSetName = 'neverexpire')] [ValidateNotNullOrEmpty()] [Switch]$neverexpire
     )
 
     $pass = Get-Password -username $user -password $pass
-
     Try {
         if (Test-VCFConnection -server $server) {
             if (Test-VCFAuthentication -server $server -user $user -pass $pass) {
@@ -4631,9 +4630,47 @@ Function Update-VcenterRootPasswordExpiration {
                                         Write-Warning "Update Root Password Expiration Policy on vCenter Server ($($vcfVcenterDetails.fqdn)), already set: SKIPPED"
                                     }
                                 } else {
-                                    if ((Get-VcenterRootPasswordExpiration).max_days_between_password_change -ne $maxDays -or (Get-VcenterRootPasswordExpiration).email -ne $email -or (Get-VcenterRootPasswordExpiration).warn_days_before_password_expiration -ne $warnDays) {
-                                        Set-VcenterRootPasswordExpiration -email $email -maxDays $maxDays -warnDays $warnDays | Out-Null
-                                        if ((Get-VcenterRootPasswordExpiration).max_days_between_password_change -eq $maxDays -or (Get-VcenterRootPasswordExpiration).min_days_between_password_change -eq $minDays -or (Get-VcenterRootPasswordExpiration).warn_days_before_password_expiration -eq $warnDays) {
+                                    $vCenterRootPasswordExpirationSettings = Get-VcenterRootPasswordExpiration
+                                    $runUpdate = $true
+                                    $updateCommand = "Set-VcenterRootPasswordExpiration"
+                                    if ($maxDays) {
+                                        $updateCommand = $updateCommand + " -maxDays $maxDays"
+                                        if (($vCenterRootPasswordExpirationSettings).max_days_between_password_change -ne $maxDays) {
+                                            $runUpdate = $runUpdate -and $true                                            
+                                        } else {
+                                            $runUpdate = $runUpdate -and $false
+                                        }
+                                    } 
+                                    if ($warnDays) {
+                                        $updateCommand = $updateCommand + " -warnDays $warnDays"
+                                        if (($vCenterRootPasswordExpirationSettings).warn_days_before_password_expiration -ne $warnDays) {
+                                            $runUpdate = $runUpdate -and $true    
+                                        } else {
+                                            $runUpdate = $runUpdate -and $false
+                                        }
+                                    } 
+                                    if ($email) {
+                                        $updateCommand = $updateCommand + " -email $email"
+                                        if (($vCenterRootPasswordExpirationSettings).email -ne $email) {
+                                            $runUpdate = $runUpdate -and $true                                            
+                                        } else {
+                                            $runUpdate = $runUpdate -and $false    
+                                        }
+                                    }
+                                    if ($runUpdate) {
+                                        $condition = $true 
+                                        Invoke-Expression $updateCommand | Out-Null
+                                        $vCenterRootPasswordExpirationSettings = Get-VcenterRootPasswordExpiration
+                                        if ($maxDays) {
+                                            $condition =  $condition -and ($vCenterRootPasswordExpirationSettings).max_days_between_password_change -eq $maxDays
+                                        } 
+                                        if ($warnDays) {
+                                            $condition =  $condition -and ($vCenterRootPasswordExpirationSettings).warn_days_before_password_expiration -eq $warnDays
+                                        } 
+                                        if ($email) {
+                                            $condition =  $condition -and ($vCenterRootPasswordExpirationSettings).email -eq $email
+                                        }
+                                        if ($condition) {
                                             Write-Output "Update Root Password Expiration Policy on vCenter Server ($($vcfVcenterDetails.fqdn)): SUCCESSFUL"
                                         } else {
                                             Write-Error "Update Root Password Expiration Policy on vCenter Server ($($vcfVcenterDetails.fqdn)): POST_VALIDATION_FAILED"