1007731 - CLI - Ldap Groups error for 'posix'.

we should only loop through visible users here, because the ldap server isn't
going to know about katello's special hidden users