The order in which inclusions and exclusions are entered does not matter. Exclusions always take precedence over inclusions. Thus, if a principal is a member of an included implicit domain and also a member of an excluded recursive group, then that principal is not included.
Thus, when using the nisgrpadm command, you can specify group members and nonmembers as shown in Table 12-2:
Table 12-2 Specifying Group Members and Nonmembers
Type of member |
Syntax |
---|---|
Explicit member |
username.domain |
Implicit member |
*.domain |
Recursive member |
@groupname.domain |
Explicit nonmember |
-username.domain |
Implicit nonmember |
-*.domain |
Recursive nonmember |
@groupname.domain |