The default groups we create should have ipaUniqueId set
    
    This adds a new directive to ipa-ldap-updater: addifnew. This will add
    a new attribute only if it doesn't exist in the current entry. We can't
    compare values because the value we are adding is automatically generated.
    
    ticket 1177