s3-util: skip S-1-18 sids in token generaion in sid_array_from_info3().

[obnox/samba/samba-obnox.git] / source3 / lib / util_sid.c

diff --git a/source3/lib/util_sid.c b/source3/lib/util_sid.c
index 4b6fb81d7550c0f3eb470160311159727fbdbcf2..4d57a92b8538213071b9ac4137623e3828310b0c 100644 (file)
--- a/source3/lib/util_sid.c
+++ b/source3/lib/util_sid.c
@@ -185,6 +185,11 @@ NTSTATUS sid_array_from_info3(TALLOC_CTX *mem_ctx,
          */
 
        for (i = 0; i < info3->sidcount; i++) {
+
+               if (sid_check_is_in_asserted_identity(info3->sids[i].sid)) {
+                       continue;
+               }
+
                status = add_sid_to_array(mem_ctx, info3->sids[i].sid,
                                      &sid_array, &num_sids);
                if (!NT_STATUS_IS_OK(status)) {