---

---
- name: Add pam_mount share
  hosts: all
  remote_user: admin
  become: true

  vars_prompt:

    - name: username
      prompt: "Введите доменного пользователя"
      private: false

    - name: share_select
      prompt: |
        Выберите шару:

        1 - DiskW
        2 - Бухгалтерия
        3 - Отдел кадров

        Ваш выбор
      private: false


  tasks:

    - name: Set share variables
      set_fact:
        share_name: "{{ shares[share_select].name }}"
        server: "{{ shares[share_select].server }}"
        path: "{{ shares[share_select].path }}"
        mountpoint: "{{ shares[share_select].mountpoint }}"


    - name: Add share to pam_mount
      blockinfile:
        marker: "# {mark} ANSIBLE MANAGED BLOCK {{ share_name }} {{ username }}"
        dest: /etc/security/pam_mount.conf.xml
        insertafter: "<!-- Volume definitions -->"

        block: |
          <volume user="{{ username }}@plasma.local"
          uid="10000-2000200000"
          fstype="cifs"
          server="{{ server }}"
          path="{{ path }}"
          mountpoint="/mnt/%(DOMAIN_USER)/{{ mountpoint }}"
          options="rw,sec=krb5i,cruid=%(USERUID),username=%(DOMAIN_USER),uid=%(USERUID),gid=%(USERGID),domain=plas.local,file_mode=0664,dir_mode=0777" />


  vars:

    shares:
      "1":
        name: "DiskW"
        server: "Virt-Fileserver"
        path: "окб"
        mountpoint: "diskw"

      "2":
        name: "Buh"
        server: "Virt-Fileserver"
        path: "buh"
        mountpoint: "buh"

      "3":
        name: "Kadry"
        server: "Virt-Fileserver"
        path: "kadry"
        mountpoint: "kadry"