[PATCH] skip asserted identity sids in token generation

[Andreas Schneider]

On Friday 15 January 2016 18:35:02 Günther Deschner wrote:
> Hi,
> 
> The S-1-18-1 (Authentication authority asserted identity) is typically
> part of the PAC validation info3 from Windows Server 2012 and should
> be omitted for the token calculation as it remains as an unmapped group.

Hey Günther,

the bug only has the master patch. Could you please do backports?


Thanks,


	-- andreas

-- 
Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org
www.samba.org