Group Syntax

The order in which inclusions and exclusions are entered does not matter. Exclusions always take precedence over inclusions. Thus, if a principal is a member of an included implicit domain and also a member of an excluded recursive group, then that principal is not included.

Thus, when using the nisgrpadm command, you can specify group members and nonmembers as shown in Table 12-2:

Table 12-2 Specifying Group Members and Nonmembers

Type of member	Syntax
Explicit member	username.domain
Implicit member	*.domain
Recursive member	@groupname.domain
Explicit nonmember	-username.domain
Implicit nonmember	-*.domain
Recursive nonmember	@groupname.domain