From ecc7022d7c3cd481b0caf6c9c48c72ea3e7ac822 Mon Sep 17 00:00:00 2001
From: =?utf8?q?G=C3=BCnther=20Deschner?= <gd@samba.org>
Date: Fri, 15 Jan 2016 14:43:48 +0100
Subject: [PATCH] s3-util: skip S-1-18 sids in token generaion in
 sid_array_from_info3().
MIME-Version: 1.0
Content-Type: text/plain; charset=utf8
Content-Transfer-Encoding: 8bit

Bug: https://bugzilla.samba.org/show_bug.cgi?id=11677

Guenther

Signed-off-by: Günther Deschner <gd@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Sat Jan 16 01:24:04 CET 2016 on sn-devel-144
---
 source3/lib/util_sid.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/source3/lib/util_sid.c b/source3/lib/util_sid.c
index 4b6fb81d755..4d57a92b853 100644
--- a/source3/lib/util_sid.c
+++ b/source3/lib/util_sid.c
@@ -185,6 +185,11 @@ NTSTATUS sid_array_from_info3(TALLOC_CTX *mem_ctx,
          */
 
 	for (i = 0; i < info3->sidcount; i++) {
+
+		if (sid_check_is_in_asserted_identity(info3->sids[i].sid)) {
+			continue;
+		}
+
 		status = add_sid_to_array(mem_ctx, info3->sids[i].sid,
 				      &sid_array, &num_sids);
 		if (!NT_STATUS_IS_OK(status)) {
-- 
2.34.1