[PATCH] skip asserted identity sids in token generation

[Jeremy Allison]

On Fri, Jan 15, 2016 at 06:35:02PM +0100, Günther Deschner wrote:
> Hi,
> 
> The S-1-18-1 (Authentication authority asserted identity) is typically
> part of the PAC validation info3 from Windows Server 2012 and should
> be omitted for the token calculation as it remains as an unmapped group.
> 
> Please review and push.

Nice work Günther, thanks ! Pushed.