control:

  HasNTPUser::
    NTPUser  = ("ntp")
  !HasNTPUser::
    NTPUser  = ("root")

groups:
  HasNTP     = ( "/usr/bin/test -f /usr/sbin/ntpd" )
  HasNTPUser = ( "/bin/grep ntp /etc/passwd > /dev/null" )

copy:
  HasNTP::
     blah,blah
     owner=$(NTPUser)