337dd8a IPA: Use search bases instead of domain_to_basedn when fetching external groups

Authored and Committed by jhrozek 6 years ago
    IPA: Use search bases instead of domain_to_basedn when fetching external groups
    
    Instead of deriving the search base from the IPA domain name, actually
    use the search base from the sdap_domain structure.
    
    This has primarily the advantage of not matching groups in the compat
    tree.
    
    Resolves:
        https://pagure.io/SSSD/sssd/issue/3378
    
    Reviewed-by: Pavel Březina <pbrezina@redhat.com>