[PATCH] skip asserted identity sids in token generation

Andreas Schneider asn at samba.org
Tue Feb 9 06:49:02 UTC 2016

On Friday 15 January 2016 18:35:02 Günther Deschner wrote:
> Hi,
> The S-1-18-1 (Authentication authority asserted identity) is typically
> part of the PAC validation info3 from Windows Server 2012 and should
> be omitted for the token calculation as it remains as an unmapped group.

Hey Günther,

the bug only has the master patch. Could you please do backports?


	-- andreas

Andreas Schneider                   GPG-ID: CC014E3D
Samba Team                             asn at samba.org

More information about the samba-technical mailing list