core: authz: add dnType variable when resolving groups

makes it easier for profile to skip objects it is not interested in.

Change-Id: I58dbdfa49a180f5944a0fac68fdeb910f1bbb3d3
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>
core: authz: try to reduce duplicate groups within collection

Change-Id: I960eb3e4db25a8724714ff908b29e8758505efc3
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>
profiles: ad: drop recursive gc group resolution

gc will not contain global and local group members for foreign domains.
As a result we drop the super efficient recursive group resolution of
active directory and back to recursive resolution within both gc and
local domain of entity. this reduces active directory performance
greatly compared to other ldap implementations.

optimization that was not performed is to avoid querying local groups
within gc. however, querying the group for its properties is probably
the same as just query its groups.

Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1131179
Change-Id: I896e6d3ceef71b19c9cdaa2958199c3417f28a5e
Signed-off-by: Alon Bar-Lev <alonbl@redhat.com>