{% set file_server = salt['pillar.get']('smb_server') %}

install_pam_mount_cifsutils:
  pkg.installed:
    - pkgs:
     - libpam-mount
     - cifs-utils

copy_pam_mount_xml:
  file.managed:
    - name: /etc/security/pam_mount.conf.xml
    - replace: True
    - contents: |
       <?xml version="1.0" encoding="utf-8" ?>
       <!DOCTYPE pam_mount SYSTEM "pam_mount.conf.xml.dtd">
       <pam_mount>
       <debug enable="1" />
       <volume
       fstype="cifs"
       server="{{ file_server }}"
       path="%(USER)"
       mountpoint="/home/%(USER)/fs"
       options="rw,user=%(USER),gid=%(USER),uid=%(USER),cruid=%(USER),sec=krb5i,file_mode=0660,dir_mode=0770"
       />
       <mntoptions allow="nosuid,nodev,loop,encryption,fsck,nonempty,allow_root,allow_other" />
       <mntoptions require="nosuid,nodev" />
       <logout wait="50000" hup="1" term="1" kill="1" />
       <mkmountpoint enable="1" remove="true" />
       </pam_mount>