How does one add an AD group to a local group in Puppet 3.6.*
The group resource can't be used to define the AD group because group has no groups attribute.
The group resource can't be used to define the local group (using the groups attribute to add the AD group) because the auth_membership attribute is not valid until Puppet 4.*. Without that attribute, I cannot add a single entity to a local group without defining every member of the group (unless I am misreading the documentation.)
Am I left to cover this with an exec?