Anyone have any experience integrating Mac OS X Server hosts into an existing NIS environment?
I'm having issues getting my hosts to restrict which NIS users are allowed to connect (via ssh).

The NIS config in Directory Services specifically says to look at the unix config files (/etc/passwd and co.) first, and then use NIS. Even with this (and various combinations of), the OS ignores directives to use netgroups or allow specific NIS users.

The man pages for passwd say it supports +@netgroup:::::: and such, but then it completely ignores them when placed in either /etc/passwd or /etc/master.passwd and either allows everyone to ssh in, or allows nobody (except local user accounts).

It's beginning to look a lot like Apple has put in various options in the GUI, but not made them functional.

Any help appreciated.