=?utf-8?q?=5BSSSD-users=5D?=(&(objectClass=sudoRole)(modifyTimestamp>=1)) => fail