---
- name: install needed packages
  apt:
    name:
      - libpam-mount
      - cifs-utils
    state: latest

- name: configure pam_mount
  blockinfile:
    dest: /etc/security/pam_mount.conf.xml
    block: |
      <volume
        fstype="cifs"
        server="{{ smb_server }}"
        path="{{ smb_home }}"
        mountpoint="/home/%(DOMAIN_USER)"
        options="sec=krb5i,vers=3.0,cruid=%(USERUID),user=%(USER)"
      ><not><or><user>root</user><user>ansible</user><user>Debian-gdm</user><user>sddm</user><user>virti</user></or></not></volume>
    insertafter: "<!-- Volume definitions -->"