https://fedorahosted.org/sssd/ticket/926
There's one more branch where the RDN attribute name matches the naming
attribute name but value is not found in the naming attribute values. I
didn't touch that one because I wanted to loosen the rules as little
as possible.