ipa-kdb: fix retry logic in ipadb_deref_search
    
    This function retried an LDAP search when the result was OK due to
    flawed logic of retry detection (ipadb_need_retry function which
    returns true when we need retry and not 0).
    
    https://fedorahosted.org/freeipa/ticket/3413