s3:pdb_ldap: don't search for the users primary group, if we already know it