Perform initgroups lookups for all domains
    
    Previously, we were setting the client context PAM lookup timeout
    after the first domain replied. However, if the user wasn't a
    member of the first domain, their information wasn't being
    updated.
    
    This patch ensures that we only set this timeout after the user
    has been found or all domains were searched.