gistfile1.txt

------------------macauth.pp-----------------------

#!/usr/bin/env puppet

macauthorization { 'system.device.dvd.setregion.initial':
        auth_class 	=> 'user',
	comment		=> 'Changed by Puppet - Used by DVD Player for Region Code',
	group		=> 'staff',
	shared		=> 'true',
	
}

macauthorization {'sys.openfile.readwrite./private/etc/httpd/httpd.conf':
	auth_class 	=> 'user',
	group		=> 'dumbadmin',
	mechanisms	=> ['builtin:authenticate'],
	shared		=> 'false',
}

---------------------------------Running with puppet apply------------------------

bash-3.2# puppet apply macauth.pp 
notice: /Stage[main]//Macauthorization[sys.openfile.readwrite./private/etc/httpd/httpd.conf]/ensure: created
err: /Stage[main]//Macauthorization[sys.openfile.readwrite./private/etc/httpd/httpd.conf]: Could not evaluate: flush requested for unknown type.
notice: /Stage[main]//Macauthorization[system.device.dvd.setregion.initial]/comment: comment changed 'Used by the DVD player to set the region code the first time.  Note that changing the region code after it has been set requires a different right (system.device.dvd.setregion.change).' to 'Changed by Puppet - Used by DVD Player for Region Code'
notice: /Stage[main]//Macauthorization[system.device.dvd.setregion.initial]/group: group changed 'admin' to 'staff'
err: /Stage[main]//Macauthorization[system.device.dvd.setregion.initial]: Could not evaluate: flush requested for unknown type.

Need to include "auth_type => 'right'" for the system.preferences top level site