Passing secure parameter to fixlet through Api

[atshenoy]

i am trying to pass secure value to a fixlet parameter by adding this in the body of post in rest api

fixlet is like

action parameter query “value” with description "value"
run powershell -ExecutionPolicy Bypass “C:\Test\try.ps1” -h {parameter “value”}

and i am passing the value in following manner

value to be passed

but not getting the desired output. can anyone help me here.

[atshenoy]

<SecureParameter Name="value">Value to be passed</SecureParameter>

this is how the value is passed

[JasonWalker]

Thanks, I understand that. But there is something wrong in the XML, likely another tag that is misplaced or out of order. If you can post your full XML we can try to help, otherwise you may need to refer again to the examples and the XML schema listed at developer.bigfix.com to see where your issue lies.

Additionally there are a number of tools that can validate an XML document against an XSD schema, so you might try validating your XMl with such a tool.

[atshenoy]

       <BES>
       <SourcedFixletAction>
       <SourceFixlet>
       <Sitename>siteName is passed</Sitename>
       <FixletID>FixletID is passed</FixletID>
       <Action>Action1</Action>
       </SourceFixlet>
       <Target>
       <ComputerName>computerName is passed</ComputerName>
       </Target>
        <SecureParameter Name="value">Value to be passed</SecureParameter>
      </SourcedFixletAction>
       </BES>

This is the xml body to post.

[JasonWalker]

Thanks. On the face of it, I don’t see anything wrong with the XML structure or the element order.

I wonder whether your SecureParameter value has any special characters that need to be escaped in XML, such as <, >, or & ? Could you try sending the action with a very simple value for the parameter?

[atshenoy]

   <BES>
   <SourcedFixletAction>
   <SourceFixlet>
   <Sitename>siteName is passed</Sitename>
   <FixletID>FixletID is passed</FixletID>
   <Action>Action1</Action>
   </SourceFixlet>
   <Target>
   <ComputerName>computerName is passed</ComputerName>
   </Target>
    <SecureParameter Name="value">$ecureV@lu3</SecureParameter>
  </SourcedFixletAction>
   </BES>

Since the body is not getting executed the action is not getting created

if
<Parameter Name="value">$ecureV@lu3</Parameter>
passed like this the action gets created but the value is visible in Action which gets created when the fixlet gets executed.

[JasonWalker]

Comparing with an example from a previous past at Securely creating fixlets to update OS user passwords , the only differences I see are that you are not declaring the top-level XML doc type, and not referencing the xml namespace attributes on the <BES> tag.

While I would expect that to behave the same between Parameter and SecureParameter, it may be worth trying to add those.

I’ll try to fire up my server later today to try it on my lab.

Also as a test, see whether you can target by ComputerID instead of name.