s4:ldap.py Improve testsuite for primaryGroupToken behaviour