2 files changed, 79 insertions, 0 deletions
diff --git a/ansible/node/roles/nas/tasks/redhat/nfs.yml b/ansible/node/roles/nas/tasks/redhat/nfs.yml
new file mode 100644
index 0000000..4dc1d7c
--- /dev/null
+++ b/ansible/node/roles/nas/tasks/redhat/nfs.yml
@@ -0,0 +1,31 @@
+---
+- name: install NFS packages
+  package:
+    name: nfs-utils
+    state: present
+
+- name: ensure NFS does not autostart
+  service:
+    name: "{{ s }}"
+    enabled: no
+  with_list:
+    - nfs
+    - nfslock
+  loop_control:
+    loop_var: s
+
+- name: generate NFS configuration
+  template:
+    src: nfs_sysconfig.j2
+    dest: /etc/sysconfig/nfs
+
+- name: check if /etc/sysconfig/rpc-rquotad exists
+  stat:
+    path: /etc/sysconfig/rpc-rquotad
+  register: sysconfig_rpc_rquotad
+
+- name: generate quota configuration file
+  file:
+    src: rpc-rquotad.sysconfig
+    path: /etc/sysconfig/rpc-rquotad
+  when: sysconfig_rpc_rquotad.stat.exists
diff --git a/ansible/node/roles/nas/tasks/redhat/samba.yml b/ansible/node/roles/nas/tasks/redhat/samba.yml
new file mode 100644
index 0000000..ebcd7fb
--- /dev/null
+++ b/ansible/node/roles/nas/tasks/redhat/samba.yml
@@ -0,0 +1,48 @@
+---
+
+- name: install Samba packages
+  package:
+    name:
+    - tdb-tools
+    - samba
+    - samba-client
+    - samba-doc
+    - samba-winbind
+    - samba-winbind-clients
+    state: present
+
+- name: install Samba packages for GPFS
+  package:
+    name: samba-vfs-gpfs
+    state: present
+  when: clusterfs.type == 'gpfs'
+
+- name: ensure Samba does not autostart
+  service:
+    name: "{{ service }}"
+    enabled: no
+  with_list:
+    - smb
+    - nmb
+    - winbind
+  loop_control:
+    loop_var: service
+
+- name: Set up NSS, PAM, ...
+  command: >
+    authconfig --update --nostart
+      --disablewinbindauth --disablewinbind --disablekrb5
+  when: auth_method == 'files'
+
+- name: Set up NSS, PAM, KRB5, ...
+  command: >
+    authconfig --update --nostart
+      --enablewinbindauth --enablewinbind --enablekrb5
+      --krb5kdc={{ kdc }}.{{ resolv_conf.domain }}
+      --krb5realm={{ resolv_conf.domain }}
+  when: auth_method == 'winbind'
+
+- name: Set up NSS, PAM, KRB5, ...
+  fail:
+    msg: "Invalid auth_method: {{ auth_method }}"
+  when: auth_method != 'files' and auth_method != 'winbind'