[PATCH] skip asserted identity sids in token generation

[Günther Deschner]

Hi,

The S-1-18-1 (Authentication authority asserted identity) is typically
part of the PAC validation info3 from Windows Server 2012 and should
be omitted for the token calculation as it remains as an unmapped group.

Please review and push.

Thanks,
Guenther
-- 
Günther Deschner                    GPG-ID: 8EE11688
Red Hat                         gdeschner at redhat.com
Samba Team                              gd at samba.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: master.patch
Type: application/mbox
Size: 7565 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20160115/3e8b740d/master.mbox>