[SSSD] [sssd PR#5239][+Changes requested] gpo: use correct base dn