[SSSD] 'no primary group ID provided' when using AD in ldap mode