Split generating primary GID for ID mapped users into a separate function
    
    Move the part of sdap_save_user into a separate function so that it can
    be special cased an only called for users in primary domains, not
    subdomain users.