fix role account filter

Author: macmaster

cookbooks/bcpc-hadoop/libraries/ldap_search.rb

@@ -34,8 +34,8 @@ def group_search(mode, group, attr = 'sAMAccountName')
         role: "'(&" \
           "(objectClass=user)" \
           "(!(objectClass=computer))" \
-          "(memberOf=#{@roles_dn})" \
           "(memberOf=%{group})" \
+          "(|(memberOf=#{@roles_dn})(!(employeeID=*)))" \
         ")'",
         user: "'(&" \
           "(objectClass=user)" \