You probably just don't have the home directory properly set up on the client machine.
When the user logs in with NIS it will read the NIS map for password authentication. Look at the user's account in the NIS passwd table and see what the homedirectory is. Then go to the client machine and make sure the home directory exists with the proper permissions.
The +:::::: says to append the NIS password map to the end of the local password file on the client. You really should change thatto +:*:::::. The * will not let + become a valid user unless it can authenticate through NIS. Without the *, + does not need to authenticate to become a valid user in the event that NIS is not running and is a huge security risk!
If you don'twant the users to be able to login on the client, unless the account is on the client machine it doesn't seem like you need to incorporate the passwd table into NIS at all and I'm not sure why you've done that. But in the mean time you would removethe line that reads +:::::: completely on the client machine so it won't search for the user's account within NIS. As long as that line is in there anyone that is in the NIS passwd table can login to the client.