extdom: return LDAP_NO_SUCH_OBJECT if domains differ
    
    If a client sends a request to lookup an object from a given trusted
    domain by UID or GID and an object with matching ID is only found in a
    different domain the extdom should return LDAP_NO_SUCH_OBJECT to
    indicate to the client that the requested ID does not exists in the
    given domain.
    
    Resolves: https://pagure.io/freeipa/issue/8965
    Reviewed-By: Rob Crittenden <rcritten@redhat.com>