Overriding a Principal's Group Affiliation

To override a principal's group affiliation, create an override entry that contains the principal's name or UNIX ID as a key and the UNIX ID of the group that is to be used as the override. Use the principal's name as a key to apply the overrides only to the account for the principal's primary name. Use the principal's UNIX ID as a key to apply the overrides to all of the principal's accounts, including any accounts for the principal's aliases. For example, the following entry overrides the group that is normally associated with the account for principal mozart:

mozart:::356:::

This override does not apply to any accounts for any of mozart's aliases. To apply the overrides to those accounts, the entry must be keyed by mozart's UNIX ID (567), as follows:

::567:356:::