SUDO LDAP Manual
information from pbrezina about sudo_search_base a algorithm decisions