server: Retrieve the groups for a token from the server.

server/protocol.def

diff --git a/server/protocol.def b/server/protocol.def
index ef9acb1..e08db4c 100644
--- a/server/protocol.def
+++ b/server/protocol.def
@@ -193,6 +193,13 @@
     /* VARARGS(dacl,ACL); */
 };
 
+struct token_groups
+{
+    unsigned int count;
+    /* unsigned int attributes[count]; */
+    /* VARARGS(sids,SID); */
+};
+
 /****************************************************************/
 /* Request declarations */
 
@@ -2509,6 +2516,13 @@
     VARARG(user,SID);             /* sid of the user the token represents */
 @END
 
+@REQ(get_token_groups)
+    obj_handle_t    handle;       /* handle to the token */
+@REPLY
+    size_t          user_len;     /* length needed to store user */
+    VARARG(user,token_groups); /* groups the token's user belongs to */
+@END
+
 /* Create a mailslot */
 @REQ(create_mailslot)
     unsigned int   access;        /* wanted access rights */