---
- name: Check fileset samba export default ACL
  uri:
    url: "{{ checksambaeveryoneaclEndpoint }}"
    user: "{{ clusterUser }}"
    password: "{{ clusterPassword }}"
    method: GET
    validate_certs: no
    return_content: yes
    force_basic_auth: yes
    status_code: 200, 400
  register: check_response

# - name: Inspect remove ACL check
#   debug:
#     msg: "{{ check_response }}"

# GPFS AD connectivity/cache may not be able to return a user lookup from AD in a timely manner after a period of inactivity, until loop employed
- name: Remove fileset samba export default ACL
  uri:
    url: "{{ removesambaeveryoneaclEndpoint }}"
    user: "{{ clusterUser }}"
    password: "{{ clusterPassword }}"
    method: DELETE
    validate_certs: no
    return_content: yes
    force_basic_auth: yes
    status_code: 202, 400
  register: response
  until: response.json.status.code == 202
  retries: 20
  delay: 10
  when: check_response.json.status.code == 200

# - name: Inspect remove ACL check
#   debug:
#     msg: "{{ response }}"

# - name: Report failure
#   fail:
#     msg: "Invalid request body"
#   when: response.json.status.code == 400

# - set_fact:
#     jobId: "{{ response.json.jobs[0].jobId }}"

# - name: Check Job
#   include_tasks: checkjob.yml
#   vars:
#     failmessage: "Unable to remove ACL for group Everyone for share {{ filesetName }}"

- name: Register dummy host with variable storage_fail
  add_host:
    name: "DUMMY_HOST"
    storage_fail: "Remove share ACL invalid request body, please notify administrator"
  #when: not response.skipped and response.json.status.code == 400
  when: response.json.status.code == 400

- set_fact:
    jobId: "{{ response.json.jobs[0].jobId }}"
  #when: not response.skipped and response.json.status.code != 400
  when: response.json.status.code != 400

- name: Check Job
  include_tasks: checkjob.yml
  vars:
    fail_message: "Unable to remove 'group Everybody' ACL for share"
  #when: not response.skipped and response.json.status.code != 400
  when: response.json.status.code != 400