class nodo::subsystem::media::groups { group { 'incoming': ensure => 'present', allowdupe => false, } user { "incoming": password => '*', ensure => present, shell => '/bin/false', gid => 'incoming', allowdupe => false, require => Group['incoming'], } }