class kerberos {

  package {
    "kerberos-client":
      name => $operatingsystem ? {
        centos, redhat = "krb5-workstation",
        debian, ubuntu = "unknown",
        Solaris = "service/security/kerberos-5",
      },
      ensure  => installed,

    "pam_krb5":
      name => $operatingsystem ? {
        centos, redhat = "pam_krb5",
        debian, ubuntu = "unknown",
        Solaris = undef,
      },
      ensure => installed,
  }

# OTHER STUFF, ELIDED HERE
}