> Basically what I'm asking, does this seem sane to more experienced people, or > am I setting myself up for pain?
I do it pretty much like that, and it works for me. A couple things, though: 1) unless you intend for your user::admins and user::notadmins classes to override properties of your virtual users, they should "include" the user::virtual class instead of inheriting from it (the BP example notwithstanding) 2) your virtual User declarations should each "require" the appropriate Group to ensure that it is present before any of its users are managed. (The relative order in which you declare or realize them cannot ensure this.) The groups being declared virtually does not pose a problem for that. Cheers, John -- You received this message because you are subscribed to the Google Groups "Puppet Users" group. To post to this group, send email to puppet-us...@googlegroups.com. To unsubscribe from this group, send email to puppet-users+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/puppet-users?hl=en.