$user='user here'
      $hashedpasswd='hash_here'
      exec { 'setpass':
        command => "usermod -p \"$hashedpasswd\" $user",
        path => "/bin:/usr/bin:/sbin:/usr/sbin",
        onlyif => "grep -q $user /etc/passwd",
        unless => "egrep -q "$user.*$hashedpasswd" /etc/shadow",
      }