Always check for userid as UPN

[jvlcek]

Always check for userid in UPN format, even when "Get User Groups
from External Authentication (httpd)" is not checked

https://bugzilla.redhat.com/show_bug.cgi?id=1496979

The recent changes to the authentication code space to normalize userid to UPN format
resulted in an edge case failure.

A user entry in the database would not be found if the userid is in UPN format when
"Get User Groups from External Authentication (httpd)" is not checked

This PR addresses this edge case.

[jvlcek]

@abellotti I discovered this edge case while rerunning some miqldap_to_sssd test scenarios while documenting it. Please take a look. Thank you!

[miq-bot]

Checked commit jvlcek@2ba8f0c with ruby 2.2.6, rubocop 0.47.1, and haml-lint 0.20.0
3 files checked, 0 offenses detected
Everything looks fine. ⭐

[abellotti]

LGTM!! @gtanzillo can we borrow your 👀 ? Thanks.

one concern was the line https://github.com/ManageIQ/manageiq/pull/16069/files#diff-5214aab14508eac8c281a77da26e8cd2R94
note, this was not changed here so not an issue in this PR. General concern was the second % wildcard, in case there's both a cn=jvlcek,ou=people,dc=example,dc=com and cn=jvlcek,ou=people,ou=engineering,dc=example,dc=com, they may be 2 different users sharing the same rdn, the code may match the wrong one. Something to look for, verify scenario with the sssd_to_ldap conversion script.

[gtanzillo]

LGTM too 👍