CONFLICTS=	puppet-devel-[0-9]*

--- lib/puppet/provider/user/pw.rb

+++ lib/puppet/provider/user/pw.rb

@@ -1,10 +1,11 @@

 require 'puppet/provider/nameservice/pw'

+require 'open3'

 Puppet::Type.type(:user).provide :pw, :parent => Puppet::Provider::NameService::PW do

   desc "User management via `pw` on FreeBSD."

   commands :pw => "pw"

-  has_features :manages_homedir, :allows_duplicates

+  has_features :manages_homedir, :allows_duplicates, :manages_passwords

   defaultfor :operatingsystem => :freebsd

@@ -23,7 +24,7 @@ Puppet::Type.type(:user).provide :pw, :parent => Puppet::Provider::NameService::

   def addcmd

     cmd = [command(:pw), "useradd", @resource[:name]]

     @resource.class.validproperties.each do |property|

-      next if property == :ensure

+      next if property == :ensure or property == :password

       # the value needs to be quoted, mostly because -c might

       # have spaces in it

       if value = @resource.should(property) and value != ""

@@ -37,5 +38,30 @@ Puppet::Type.type(:user).provide :pw, :parent => Puppet::Provider::NameService::

     cmd

   end

+

+  def create

+    super

+

+    # Set the password after create if given

+    self.password = @resource[:password] if @resource[:password]

+  end

+

+  # use pw to update password hash

+  def password=(cryptopw)

+    Puppet.debug "change password for user '#{@resource[:name]}' method called with hash '#{cryptopw}'"

+    stdin, stdout, stderr = Open3.popen3("pw user mod #{@resource[:name]} -H 0")

+    stdin.puts(cryptopw)

+    stdin.close

+    Puppet.debug "finished password for user '#{@resource[:name]}' method called with hash '#{cryptopw}'"

+  end

+

+  # get password from /etc/master.passwd

+  def password

+    Puppet.debug "checking password for user '#{@resource[:name]}' method called"

+    current_passline = `getent passwd #{@resource[:name]}`

+    current_password = current_passline.chomp.split(':')[1] if current_passline

+    Puppet.debug "finished password for user '#{@resource[:name]}' method called : '#{current_password}'"

+    current_password

+  end

 end