HBAC rule does not work for AD trust users

Issue

1. In IPA-AD trust, IPA POSIX group is not shown in id aduser command when adding group membership for AD users as AD user --> AD group --> IPA external group --> IPA POSIX group.

2. However, in the same IPA-AD trust environment, IPA POSIX group is shown in the id aduser command when adding AD user directly into IPA external group as AD user --> IPA external group --> IPA POSIX group.

3. This affects the HBAC rule which should be applies to the AD groups and AD users in the first scenario.