Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm interested in learning to use Puppet. One example I see over and over again is user management. According the the Puppet website, "Configuration management – User accounts" is a feature that only exists on Puppet Enterprise. Yet the examples that I am seeing make no mention of requiring the enterprise version.

The FAQ states, in part:

We only have one, open source version of Puppet.

So does one need to pay for Puppet Enterprise if one wishes to manage users on more than 10 nodes at once? I'm guessing that there model might be akin to Red Hat? Are the packages in distrobutions like Ubuntu actually distrobutions of Puppet Enterprise?

share|improve this question
up vote 6 down vote accepted

It depends on your authentication and user management infrastructure. Puppet Enterprise can do user management in LDAP, AD and apparently Google. See here:

If you use none of that and just want to manage /etc/passwd and /etc/shadow, i.e. local users, or if you are proficient enough to implement your own Puppet module to manage your LDAP/AD users, then you certainly don't need Puppet Enterprise. Puppet has built-in support for users and groups, see here: and here:

This blog post is also interesting for efficiently managing local user accounts:

You can always install the latest Puppet packages from the official Puppetlabs repos: and And no, Puppet packages in Ubuntu are not based on Puppet Enterprise.

share|improve this answer
Your first paragraphs link clearly states that the "support" for AD/LDAP is for allowing LDAP users to login to the web interface, and not for managing users in AD/LDAP. Quote: "Now, users of Puppet Enterprise can be managed and authenticated leveraging their existing authentication solution. - " You other paragraphs and links are accurate. – Not Now Sep 18 '13 at 2:29

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.