Unfortunately, none of these worked. Is there any way to debug this to verify that it's definitely a subdomain issue, and not something else? Thanks for your help so far. On Tue, 2006-01-10 at 20:18 -0600, Dan Cox wrote: > Try a couple of things.. > > change the triple > (ldap02,,inside.exampledomain.com) > > to read > > (ldap02,,) > > If that works, try changing it to read: > > (ldap02,,exampledomain.com) > > If that works, then NIS netgroups may not be able to work with subdomains.