It seems when chef creates a user with the id of "foobar" it also creates a group with the id of "foobar". AWS doesn't do that.

So, when I run my create users script via Opsworks it blows up on the first user that already exists because the group doesn't.

I thought there was a way to say create the user but not the group, but I can't find it.

What's the best way to solve this problem? Can I:

• Tell chef to not create the user's group?
• Tell chef to create it if the user exists but the group doesn't?
• Write a script that finds the existing users and creates groups for them?
• Something else?