Add support for client side quotas

[mboisson]

This is to address #418

It does not yet address the firewall rules. I am not entirely sure I understand what rules should be applied.

[mboisson]

Looking with netstat -tulpn | grep LISTEN on the management node, there are about 45 open ports. Excluding ports that are open just for local host, we have:

• alertmanager
• httpd
• java
• kadmind
• krb5kdc
• mokey
• node_exporter
• ns-slapd
• prometheus
• prometheus-sl
• rsyslogd
• slurmctld
• slurmdbd
• sshd
  to which we add rpc.rquotad.

Seems like the ports are always the same on different clusters.
Also, it seems that rpc.rquotad always uses the same port (815, contrary to 111 state in the RH doc).

@cmd-ntrf, I guess we would need to close down the firewall to all ports first, and only open the firewall in the puppet code that enables each of those services ?

[mboisson]

Note for future self, firewall rules will wait on #406 when iptables is replaced with nftables