Merge pull request #287 from SoftwareAG/bpaskalev-base64

add base64 credentials capability

Author: YanaSimeonova

templates/sag-spm-boot-winrm/README.md

@@ -87,6 +87,26 @@ sagcc exec templates composite apply sag-spm-boot-winrm nodes=["host1","host2"]
 
   --sync-job --wait 600
 ```
+If there are special characters in the password base64-encoded credentials in the format user:password could be provided as a parameter using -Base64Credentials. The credentials could be encoded with oneliner as described below
+For bash(like):
+```bash
+echo -n 'username:password' |  base64
+```
+For powershell:
+```bash
+[Convert]::ToBase64String([Text.Encoding]::ASCII.GetBytes('username:password'))
+```
+In that case the bootstrap should be done:
+```bash
+sagcc exec templates composite apply sag-spm-boot-winrm nodes=["host1","host2"] \
+  cc.installer=cc-def-10.2-fix1-w64.zip \
+  install.dir=C:\\SoftwareaAG2 \
+  spm.port=8292 \
+  os.base64credentials=****** \
+  
+  --sync-job --wait 600
+```
+
 
 ## Adding a Windows infrastructure layer to a stack
 
@@ -115,6 +135,7 @@ See [sag-cc-all-layer-defs](../sag-cc-all-layer-defs/template.yaml) for details
   * Specify the required parameters, such as:
     * os.username - the username of the remote connection account
     * os.password - the password of the remote connection account
+    * os.base64credentials - base64 encoded credentials in the format user:password of the remote connection
     * nodes - one or more host names
     * install.dir - the remote installation directory
   * Finish the wizard

templates/sag-spm-boot-winrm/push-bootstrap.ps1

@@ -21,11 +21,11 @@ param
 	[Parameter(Mandatory)]
 	[ValidateNotNullOrEmpty()]
 	[string[]]$Computername,
-	
-	[Parameter(Mandatory)]
-	[ValidateNotNullOrEmpty()]
+
 	[string]$PlainCredentials,
 
+	[string]$Base64Credentials,
+	
 	[string]$RemoteTempPath="c:\temp",
 
 	[string]$RemoteInstallPath="c:\softwareag\",
@@ -47,15 +47,26 @@ $InstallerArgs=" -d $RemoteInstallPath -p $AdministratorPassword -s $HttpPort -S
 if($AcceptLicense){
 	$installerArgs+=" --accept-license"
 }
-if(($PlainCredentials.Length -gt 0 ) -and ($PlainCredentials.Contains(":"))){
+if(($PlainCredentials.Length -gt 0 ) -and ($PlainCredentials.Contains(":")) -and ( $PlainCredentials -ne "changeme:changeme" )){
 	$ruser=$PlainCredentials.Split(":")[0]
 	$rpass=$PlainCredentials.Split(":")[1]
 	$srpass=ConvertTo-SecureString -AsPlainText -Force -string $rpass
 	$credentials=new-object -TypeName System.Management.Automation.PSCredential -ArgumentList $ruser,$srpass
+}ElseIf(($Base64Credentials.Length -gt 0) -and ($Base64Credentials -ne "changeme") ){
+	$Base64Decoded=([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String($Base64Credentials))).trim()
+	if (!$?){
+		Write-Host "Invalid base64 encoded string"
+		exit 1
+	}
+	$ruser=$Base64Decoded.Split(":")[0]
+	$rpass=$Base64Decoded.Split(":")[1]
+	$srpass=ConvertTo-SecureString -AsPlainText -Force -string $rpass
+	$credentials=new-object -TypeName System.Management.Automation.PSCredential -ArgumentList $ruser,$srpass
 }else{
-	Write-Host "Wrong format username:pass"
+	Write-Host "Wrong format username:password"
 	exit 1
 }
+
 foreach ($comp in $computers.Replace("[","").Replace("]","").Replace("`"","").Replace(" ","").trim()){
 	start-job -ScriptBlock { 
 		param($comp,$cred,$srz,$rtp,$rip,$iar) 

templates/sag-spm-boot-winrm/template.yaml

@@ -26,8 +26,9 @@ environments:
     # REQUIRED
     nodes: ${}                  # Remote hostnames to bootstrap, e.g ["host1","host2"]
     cc.installer: ${}           # Command Central bootstrap installer for Windows, e.g. cc-def-10.2-fix1-w64.zip
-    os.username: ${}            # Remote connection user account username
-    os.password: ${}            # Remove connection user account password
+    os.username: changeme            # Remote connection user account username
+    os.password: changeme            # Remove connection user account password
+    os.base64credentials: changeme   # Remote connection credentials in form user:pass base64 encoded
 
     # OPTIONAL
     install.dir: C:\SoftwareAG  # Remote installation directory
@@ -43,13 +44,13 @@ environments:
         description: Bootstrap SPM on remote Windows hosts from Command Central Windows host
         phase: pre 
         script: |
-          powershell.exe -command ${com.softwareag.install.root}\profiles\CCE\data\templates\composite\sag-spm-boot-winrm\push-bootstrap.ps1 -Computername '${nodes}' -RemoteTempPath ${os.temp.dir} -LocalInstaller  ${com.softwareag.install.root}\profiles\CCE\data\installers\${cc.installer} -RemoteInstallPath ${install.dir}  -HttpPort ${spm.port} -HttpsPort ${spm.secure.port} -AcceptLicense -PlainCredentials ${os.username}:${os.password}
+          powershell.exe -command ${com.softwareag.install.root}\profiles\CCE\data\templates\composite\sag-spm-boot-winrm\push-bootstrap.ps1 -Computername '${nodes}' -RemoteTempPath ${os.temp.dir} -LocalInstaller  ${com.softwareag.install.root}\profiles\CCE\data\installers\${cc.installer} -RemoteInstallPath ${install.dir}  -HttpPort ${spm.port} -HttpsPort ${spm.secure.port} -AcceptLicense -PlainCredentials ${os.username}:${os.password} -Base64Credentials ${os.base64credentials}
       bootstrap.sh:
         target: POSIX 
         description: Bootstrap SPM on remote Windows hosts from Command Central Linux/Mac host
         phase: pre 
         script: |
-          pwsh -f ${com.softwareag.install.root}/profiles/CCE/data/templates/composite/sag-spm-boot-winrm/push-bootstrap.ps1 -Computername '${nodes}' -RemoteTempPath ${os.temp.dir} -LocalInstaller ${com.softwareag.install.root}/profiles/CCE/data/installers/${cc.installer} -RemoteInstallPath ${install.dir} -HttpPort ${spm.port} -HttpsPort ${spm.secure.port} -AcceptLicense -PlainCredentials ${os.username}:${os.password}
+          pwsh -f ${com.softwareag.install.root}/profiles/CCE/data/templates/composite/sag-spm-boot-winrm/push-bootstrap.ps1 -Computername '${nodes}' -RemoteTempPath ${os.temp.dir} -LocalInstaller ${com.softwareag.install.root}/profiles/CCE/data/installers/${cc.installer} -RemoteInstallPath ${install.dir} -HttpPort ${spm.port} -HttpsPort ${spm.secure.port} -AcceptLicense -PlainCredentials ${os.username}:${os.password} -Base64Credentials ${os.base64credentials}
 
 layers:
   infra: