System Administration Guide: Naming and Directory Services (NIS+)

NIS+ Group Syntax

The order in which inclusions and exclusions are entered does not matter. Exclusions always take precedence over inclusions. Thus, if a principal is a member of an included implicit domain and also a member of an excluded recursive group, then that principal is not included.

Thus, when using the nisgrpadm command, you can specify group members and nonmembers as shown in Table 17–2.

Table 17–2 Specifying NIS+ Group Members and Nonmembers

Type of member 

Syntax 

Explicit member 

username.domain

Implicit member 

*.domain

Recursive member 

@groupname.domain

Explicit nonmember 

-username.domain

Implicit nonmember 

-*.domain

Recursive nonmember 

@groupname.domain