fix role account filter

Author: macmaster

cookbooks/bcpc-hadoop/libraries/ldap_search.rb

@@ -34,7 +34,10 @@ def group_search(mode, group, attr = 'sAMAccountName')
         role: "'(&" \
           "(objectClass=user)" \
           "(!(objectClass=computer))" \
-          "(memberOf=#{@roles_dn})" \
+          "(|" \
+            "(!(employeeID=*))" \
+            "(memberOf=#{@roles_dn})" \
+          ")" \
           "(memberOf=%{group})" \
         ")'",
         user: "'(&" \