Yes, libuser has the ability to manage ldap groups. If someone has libuser installed and the ldap module enabled it could prevent Puppet from managing the local accounts.  By settting ENV['LIBUSER_CONF'] to use this file it ensures that the luseradd and lgroupadd commands used by Puppet will only manage local users.