diff --git a/plugins/sudoers/ldap.c b/plugins/sudoers/ldap.c
index db00f023a..967f71d4f 100644
--- a/plugins/sudoers/ldap.c
+++ b/plugins/sudoers/ldap.c
@@ -1026,6 +1026,7 @@ sudo_ldap_build_pass2(void)
 	 * If timed, use a global AND clause that has the time limit as
 	 * as the second leg. 
 	 */
+	sudo_ldap_timefilter(timebuffer, sizeof(timebuffer));
 	easprintf(&buf, "(&(sudoUser=+*)%s)", timebuffer);
     } else {
 	/* No time limit, just the netgroup selection. */