exec { 'checkforuser':
        command => "grep -q $user /etc/passwd",
        path => "/bin:/usr/bin:/sbin:/usr/sbin:",
        notify => Exec['setpass'],
      }

      $hashedpasswd='hash_here'
      exec { 'setpass':
        command => "usermod -p \"$hashedpasswd\" $user",
        path => "/bin:/usr/bin:/sbin:/usr/sbin",
        unless => "egrep -q "$user.*$hashedpasswd" /etc/shadow",
        refreshonly => true,
      }