I did follow the HowTo: Netgroups and was able to get that working. But my question is whether I can just use ldap groups with access.conf?
If I have to use netgroups, do you have a mechanism to add the host/user entries to nisNetgroupTriple in a semi-automated way other than just do ldapmodify –f <filename>?