---
- name: install nfs packages
  package:
    name: nfs-utils
    state: installed

- name: configure idmapd
  lineinfile:
    path: /etc/idmapd.conf
    regexp: '^#?Domain\s*=.*'
    line: "Domain = {{ mail_domain }}"

- name: disable sending raw uid/gid to nfs server
  copy:
    dest: /etc/modprobe.d/nfs.conf
    content: "options nfs nfs4_disable_idmapping=0\n"
    mode: 0644
    owner: root
    group: "{{ ansible_wheel }}"

- name: allow gssproxy to connect kerberos servers over https
  seboolean:
    name: nis_enabled
    state: true
    persistent: true

- name: enable rpc-gssd services
  service:
    name: rpc-gssd
    state: started
    enabled: true