Fix the compile issue in bin/samtest, and make the 'system' token just have the

System sid.  This avoids comparing with ACEs that we don't yet support in the
ADS Domain security descriptor.
(This used to be commit ace7738e123b28f69c290f9f1de50011d230e14b)

1 files changed, 2 insertions, 5 deletions

diff --git a/source3/lib/util_sid.c b/source3/lib/util_sid.c
index 9e533eb9fd..1439471f64 100644
--- a/source3/lib/util_sid.c
+++ b/source3/lib/util_sid.c
@@ -61,7 +61,7 @@ NT_USER_TOKEN anonymous_token = {
 
 static DOM_SID system_sid_array[4];
 NT_USER_TOKEN system_token = {
-    4,
+    1,
     system_sid_array
 };
 
@@ -134,10 +134,7 @@ void generate_wellknown_sids(void)
 	sid_copy( &anonymous_token.user_sids[2], &global_sid_Anonymous);
 
 	/* Create the system token. */
-	sid_copy( &system_token.user_sids[0], &global_sid_World);
-	sid_copy( &system_token.user_sids[1], &global_sid_Authenticated_Users);
-	sid_copy( &system_token.user_sids[2], &global_sid_Builtin_Administrators);
-	sid_copy( &system_token.user_sids[3], &global_sid_System);
+	sid_copy( &system_token.user_sids[0], &global_sid_System);
 	
 	initialised = True;
 }