The indirect members need to be calculated and the member attributes converted. This is normally done in baseldap::LDAPRetrieve but these methods provide their own execute() in order to handle the option values. Update sudorule_add|remove_option tests to include check that converted user/group exists in the proper format. https://pagure.io/freeipa/issue/7649 Signed-off-by: Rob Crittenden <rcritten@redhat.com> Reviewed-By: Tibor Dudlak <tdudlak@redhat.com>