HP-UX AAA Server A.08.00.01 Administrator's Guide

Line 31 Names the fourth group Denied-by-time-access. Requests that
do not match with the previous two groups are matched to this
group, because this group entry does not include a condition
section.
Line 33 The Decision attribute returns the NAK value to the FSM as an
event, which rejects the request.
Line 34 Specifies a message that is sent back to the user.
Example Group Entries 593