Template 


					
		
		
# This file is autogenerated by Puppet. Local modifications will be overwritten

+:root:ALL
+:ops:ALL
<% if domain =~ /dev\.digg\.internal$/ or engineering_access -%>
+:engineering:ALL
<% end -%>
-:ALL:ALL

				
		

		

	
	





In site.pp 





	
	

		

		

			
				
				

					
		
		
$engineering_access = false
node default {
  include site::ldap_node     # This is where the template is pulled in.
}

node lun0051.digg.internal inherits default {
  $engineering_access = true
  include site::wildcat-dev
}

				
		

		

	
	





What I get using this (puppetd -t --noop) 





	
	

		

		

			
				
				

					
		
		
notice: //Node[default]/site::ldap_node/File[/etc/security/login_access.conf]/content: is # This file is autogenerated by Puppet. Local modifications will be overwritten

+:root:ALL
+:ops:ALL
+:engineering:ALL # I made this change by hand
-:ALL:ALL
, should be # This file is autogenerated by Puppet. Local modifications will be overwritten

+:root:ALL
+:ops:ALL
-:ALL:ALL
 (noop)