define k5keytab($realm, $ensure="present") {
        if $ensure == "present" {
                exec{"add-key-${name}":
                        command => "/bin/echo '${name}, ${realm}, ${fqdn}' > /tmp/keytab-${name}-${realm}",
                        user    => root,
                        unless  => "/bin/ls /tmp/keytab-${name}-${realm} >/dev/null 2>&1",
                }
        } else {
                exec{"remove-key-${name}":
                        command => "/bin/rm /tmp/keytab-${name}-${realm}",
                        user    => root,
                        onlyif  => "/bin/ls /tmp/keytab-${name}-${realm} >/dev/null 2>&1",
                }
        }
}

k5keytab{"ftp":
        realm   => "foo",
        ensure  => absent
}