s3-util: skip S-1-18 sids in token generaion in sid_array_from_info3().

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11677

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>
Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Sat Jan 16 01:24:04 CET 2016 on sn-devel-144

diff --git a/source3/lib/util_sid.c b/source3/lib/util_sid.c
index 4b6fb81d7550c0f3eb470160311159727fbdbcf2..4d57a92b8538213071b9ac4137623e3828310b0c 100644 (file)
--- a/source3/lib/util_sid.c
+++ b/source3/lib/util_sid.c
@@ -185,6 +185,11 @@ NTSTATUS sid_array_from_info3(TALLOC_CTX *mem_ctx,
          */
 
        for (i = 0; i < info3->sidcount; i++) {
+
+               if (sid_check_is_in_asserted_identity(info3->sids[i].sid)) {
+                       continue;
+               }
+
                status = add_sid_to_array(mem_ctx, info3->sids[i].sid,
                                      &sid_array, &num_sids);
                if (!NT_STATUS_IS_OK(status)) {