sysdb: sysdb_update_members can take either name or dn
    
    We need to work with distinguish names when processing
    cross-domain membership, because groups and users may
    be stored in different sysdb tree.
    
    Resolves:
    https://fedorahosted.org/sssd/ticket/2066