diff --git a/roles/nfs-client/tasks/main.yml b/roles/nfs-client/tasks/main.yml
index 2a09463..85e0467 100644
--- a/roles/nfs-client/tasks/main.yml
+++ b/roles/nfs-client/tasks/main.yml
@@ -10,6 +10,14 @@
     regexp: '^#?Domain\s*=.*'
     line: "Domain = {{ mail_domain }}"
 
+- name: disable sending raw uid/gid to nfs server
+  copy:
+    dest: /etc/modprobe.d/nfs.conf
+    content: "options nfs nfs4_disable_idmapping=0\n"
+    mode: 0644
+    owner: root
+    group: "{{ ansible_wheel }}"
+
 - name: allow gssproxy to connect kerberos servers over https
   seboolean:
     name: nis_enabled