The order in which inclusions and exclusions are entered does not matter. Exclusions always take precedence over inclusions. Thus, if a principal is a member of an included implicit domain and also a member of an excluded recursive group, then that principal is not included.
Thus, when using the nisgrpadm command, you can specify group members and nonmembers as shown in Table 17–2.
Table 17–2 Specifying NIS+ Group Members and Nonmembers
Type of member |
Syntax |
---|---|
Explicit member |
username.domain |
Implicit member |
*.domain |
Recursive member |
@groupname.domain |
Explicit nonmember |
-username.domain |
Implicit nonmember |
-*.domain |
Recursive nonmember |
@groupname.domain |