had to abandon the variable way of adding oracle dbas for the plusignment operator way.

manifests/as.pp

@@ -4,13 +4,14 @@ class oracledb::as {
 
   include user::emagent
 
-  # define one var to be used in .k5logins
-  $oracleusers = [
-    'jenhong@stanford.edu',
-    'kmadduri@stanford.edu',
-    'sanjeevk@stanford.edu',
-    'toaivo@stanford.edu',
-  ]
+  K5login['/u01/app/oracle/.k5login'] {
+    principals +> [
+                   'jenhong@stanford.edu',
+                   'kmadduri@stanford.edu',
+                   'sanjeevk@stanford.edu',
+                   'toaivo@stanford.edu',
+                  ]
+  }
 
   base::iptables::rule { 'as_dba_access':
     description => 'AS VDI range for DBAs to access these systems',

manifests/ntirety.pp

 # define one var to be used in .k5logins
 class oracledb::ntirety {
-  $oracleusers = [
-    'cgarcia5@stanford.edu',
-    'chapmci1@stanford.edu',
-    'dcampoy@stanford.edu',
-    'djeanbap@stanford.edu',
-    'dwinsor@stanford.edu',
-    'fabianek@stanford.edu',
-    'hodgkins@stanford.edu',
-    'jccorey@stanford.edu',
-    'jgoode2@stanford.edu',
-    #'jhaas1@stanford.edu', # win only
-    'kalis@stanford.edu',
-    'ltalaric@stanford.edu',
-    'jgims@stanford.edu',
-    'jhussey@stanford.edu',
-    'johnr2@stanford.edu',
-    'nstha78@stanford.edu',
-    #'pablos@stanford.edu', # win only
-    'pgali@stanford.edu',
-    'scosta3@stanford.edu',
-    #'terriew@stanfor.edu', # win only
-    'tiffanyv@stanford.edu',
-    'vkalyana@stanford.edu',
-    #'wsheffie@stanford.edu', # win only
-  ]
+
+  K5login['/u01/app/oracle/.k5login'] {
+    principals +> [
+                   'cgarcia5@stanford.edu',
+                   'chapmci1@stanford.edu',
+                   'dcampoy@stanford.edu',
+                   'djeanbap@stanford.edu',
+                   'dwinsor@stanford.edu',
+                   'fabianek@stanford.edu',
+                   'hodgkins@stanford.edu',
+                   'jccorey@stanford.edu',
+                   'jgoode2@stanford.edu',
+                   #'jhaas1@stanford.edu', # win only
+                   'kalis@stanford.edu',
+                   'ltalaric@stanford.edu',
+                   'jgims@stanford.edu',
+                   'jhussey@stanford.edu',
+                   'johnr2@stanford.edu',
+                   'nstha78@stanford.edu',
+                   #'pablos@stanford.edu', # win only
+                   'pgali@stanford.edu',
+                   'scosta3@stanford.edu',
+                   #'terriew@stanfor.edu', # win only
+                   'tiffanyv@stanford.edu',
+                   'vkalyana@stanford.edu',
+                   #'wsheffie@stanford.edu', # win only
+                  ]
+  }
+
 }

manifests/oracleusers.pp

@@ -14,7 +14,11 @@ class oracledb::oracleusers {
   }
 
   k5login { '/u01/app/oracle/.k5login':
+    ensure     => present,
+    principals => [ ],
+    mode       => 664,
+    user       => oracle,
+    group      => oracle,
     purge      => true,
-    principals => [ $oracledb::ntirety::oracleusers, $oracledb::as::oracleusers ],
   }
 }