Netgroups.... NIS, you mentioned it being outdated.
NIS !=
Netgroups Netgroup is just a table (just like passwd or group) to be provided either via
files, NIS or sssd.
But yes, it is maybe somewhat outdates, too. You could probably achieve the same results
using different ldap containers for users...
Ondrej