LDAP: Use shortname for LDAP queries
    
    When looking up users or groups by name, we need to user the plain
    username in the filter. The domain is typically signified by the search
    base.
    
    When looking up by UPN, we can keep using the raw value from the DP.
    
    Reviewed-by: Sumit Bose <sbose@redhat.com>