[WebRoot Plugin] Support for Network Share Credentials

[ravensorb]

As a feature request, it would be great if there was a way to specify a username/password for the WebRoot Plugin. Right now, we run posh-acme on a windows arr server that is stand alone and have a custom script that handles this -- would very much like to switch over to this plugin (remove a lot of custom scripting)

If it helps, right now we store the password as a text version of a securestring that was generated on the box running the script (this helps with security). So maybe the WebRoot plugin could add 2 additional agumnets: WRUserName and WRPasswordSecure and if they are provided.

If I get a chance I'll see about getting a POC working.

[rmbolger]

Hi @ravensorb. Thanks for reaching out. Just so I understand clearly, the credentials would be used to authenticate when WRPath points to a network share that the powershell process can't access in its own user context?

From a design perspective in the POC, I'd recommend using something like [pscredential]$WRShareCredential rather than distinct username/password parameters.

[ravensorb]

Correct on using it for authentication to a network share and I like that idea of using the pscredential object. Question, would there be any issues during a renewal with this idea?

[rmbolger]

I don't think there'd be any issues during renewal unless the previously saved credentials became invalid for some reason. The module will save them along with the other params and read them in as necessary.