AsBuiltReport.NetApp.ONTAP

0.6.6

Src/Private/Get-AbrOntapVserverCIFSSecurity.ps1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
 function Get-AbrOntapVserverCIFSSecurity {
    <#
    .SYNOPSIS
        Used by As Built Report to retrieve NetApp ONTAP Vserver CIFS Security information from the Cluster Management Network
    .DESCRIPTION

    .NOTES
        Version: 0.6.3
        Author: Jonathan Colon
        Twitter: @jcolonfzenpr
        Github: rebelinux
    .EXAMPLE

    .LINK

    #>
    param (
        [Parameter (
            Position = 0,
            Mandatory)]
            [string]
            $Vserver
    )

    begin {
        Write-PscriboMessage "Collecting ONTAP Vserver CIFS Security information."
    }

    process {
        try {
            $VserverData = Get-NcVserver -VserverContext $Vserver -Controller $Array | Where-Object { $_.VserverType -eq 'data' -and $_.AllowedProtocols -eq 'cifs' -and $_.State -eq 'running' }
            $VserverObj = @()
            if ($VserverData) {
                foreach ($Item in $VserverData) {
                    try {
                        $CIFSSVM = Get-NcCifsSecurity -VserverContext $Item.Vserver -Controller $Array
                        foreach ($SVM in $CIFSSVM) {
                            if ($SVM.KerberosClockSkew) {
                                $inObj = [ordered] @{
                                    'Kerberos Clock Skew' = $SVM.KerberosClockSkew
                                    'Kerberos Renew Age' = $SVM.KerberosRenewAge
                                    'Kerberos Ticket Age' = $SVM.KerberosTicketAge
                                    'Aes Encryption Enabled' = ConvertTo-TextYN $SVM.IsAesEncryptionEnabled
                                    'Signing Required' = ConvertTo-TextYN $SVM.IsSigningRequired
                                    'Smb Encryption Required' = ConvertTo-TextYN $SVM.IsSmbEncryptionRequired
                                    'Lm Compatibility Level' = $SVM.LmCompatibilityLevel
                                }
                                $VserverObj += [pscustomobject]$inobj
                            }
                            else {continue}
                        }
                    }
                    catch {
                        Write-PscriboMessage -IsWarning $_.Exception.Message
                    }
                }

                $TableParams = @{
                    Name = "CIFS Service Security - $($Vserver)"
                    List = $true
                    ColumnWidths = 35, 65
                }
                if ($Report.ShowTableCaptions) {
                    $TableParams['Caption'] = "- $($TableParams.Name)"
                }
                $VserverObj | Table @TableParams
            }
        }
        catch {
            Write-PscriboMessage -IsWarning $_.Exception.Message
        }
    }

    end {}

}