is no other way to look up all the netgroups for a user (unlike
regular groups). This introduces netgroup_base and netgroup_search_filter
options to ldap.conf. Based on a diff from Steven Soulen.
* No need to explicitly end a macro with No before |
because | counts as middle punctuation
and falls out of the macro, anyway.
* No need to explicitly re-open in-line macros after |
because | counts as middle punctuation
and the macros resume afterwards, anyway.
* Simplify the mnemonic remarks regarding the option letters,
no need for manual font and spacing control with No and Ns.
* Trim Ns No to just Ns, it already implies No.
constructing the netgroup query, add (sudoUser=*) to the query so
we don't fall below the 3 character OpenLDAP substring threshold.
Otherwise the index for sudoUser will never be used for that query.
Pointed out by Michael Stroeder.
