[Daniel Jacobowitz] > FYI, it's already been done: No, this is the NSS module for LDAP. I'm talking about the 'compat' module, making it possible to use '+@netgroup' in /etc/passwd to only include selected users.