idviews: Use ipaAnchorUUID without DCERPC bindings for SID anchors
    
    SID anchors are only resolvable on servers with DCERPC bindings
    installed. On non agent replica these bindings are not installed and
    therefore group and role management if there are AD user idoverride
    members.
    
    If there is an ipaUserOverride for the anchor, the ipaoriginaluid is
    returned.
    
    Fixes: https://pagure.io/freeipa/issue/9544
    
    Signed-off-by: Thomas Woerner <twoerner@redhat.com>
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>