[PATCH] skip asserted identity sids in token generation
jra at samba.org
Fri Jan 15 17:46:53 UTC 2016
On Fri, Jan 15, 2016 at 06:35:02PM +0100, Günther Deschner wrote:
> The S-1-18-1 (Authentication authority asserted identity) is typically
> part of the PAC validation info3 from Windows Server 2012 and should
> be omitted for the token calculation as it remains as an unmapped group.
> Please review and push.
Nice work Günther, thanks ! Pushed.
More information about the samba-technical