From 9a06e014b5bf3f1f921897f4376e75f881aad287 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Wed, 12 Mar 2025 16:17:58 +0100 Subject: [PATCH] s4:kdc: samba_kdc_add_compounded_auth() should add Compounded_Authentication again if it's already there Signed-off-by: Stefan Metzmacher Reviewed-by: Ralph Boehme --- source4/kdc/pac-glue.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/source4/kdc/pac-glue.c b/source4/kdc/pac-glue.c index 6b80b0461f6..e8b881cd33b 100644 --- a/source4/kdc/pac-glue.c +++ b/source4/kdc/pac-glue.c @@ -843,7 +843,11 @@ NTSTATUS samba_kdc_add_fresh_public_key_identity(struct auth_user_info_dc *user_ static NTSTATUS samba_kdc_add_compounded_auth(struct auth_user_info_dc *user_info_dc) { - return add_sid_to_array_attrs_unique( + /* + * Windows 2025 adds it even if it's + * already there, so we do... + */ + return add_sid_to_array_attrs( user_info_dc, &global_sid_Compounded_Authentication, SE_GROUP_DEFAULT_FLAGS, -- 2.47.3