From b912f410f97d9c05813dfb30c40fc481e53ea9a2 Mon Sep 17 00:00:00 2001
From: SATOH Fumiyasu <fumiyas@osstech.co.jp>
Date: Sat, 24 Mar 2012 20:47:26 +0900
Subject: [PATCH] Do not use GID -1 for local token

---
 source3/auth/auth_util.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/source3/auth/auth_util.c b/source3/auth/auth_util.c
index a904da4..0101e59 100644
--- a/source3/auth/auth_util.c
+++ b/source3/auth/auth_util.c
@@ -499,7 +499,7 @@ NTSTATUS create_local_token(struct auth_serversupplied_info *server_info)
 
 	for (i=1; i<t->num_sids; i++) {
 
-		if (ids[i].type != WBC_ID_TYPE_GID) {
+		if (ids[i].type != WBC_ID_TYPE_GID  || ids[i].id.gid == -1) {
 			DEBUG(10, ("Could not convert SID %s to gid, "
 				   "ignoring it\n",
 				   sid_string_dbg(&t->sids[i])));
-- 
1.7.9.1