SSSD sudo rules with wildcard in sudoHost no longer available

Issue

After upgrading to RHEL 8.3 (or later), SSSD no longer fetches sudo rules with wildcard character * in sudoHost attribute.

• A sudo rule allows user from any host, which matches specific pattern, is stored in LDAP backend:

  # sudo rule
  dn: cn=bobSudoRule,ou=sudoers,dc=example,dc=com
  objectClass: top
  objectClass: sudoRole
  cn: bobSudoRule
  sudoUser: bob
  sudoHost: rhel*.example.com     <<<<<=====
  sudoCommand: ALL
  

• sudo is configured to retrieve sudo rules from LDAP via SSSD

• The sudo rule works on RHEL7 and RHEL8, before upgrading to RHEL 8.3