Index: samba-4.13.13+dfsg/source4/kdc/db-glue.c
===================================================================
--- samba-4.13.13+dfsg.orig/source4/kdc/db-glue.c
+++ samba-4.13.13+dfsg/source4/kdc/db-glue.c
@@ -1839,6 +1839,11 @@ static krb5_error_code samba_kdc_fetch_k
 		   seem to need to treat it as unspecified */
 		if (flags & SDB_F_KVNO_SPECIFIED) {
 			krbtgt_number = SAMBA_KVNO_GET_KRBTGT(kvno);
+
+			/* fox: monkey patch for AD oddity */
+			if (kvno >= 100000)
+				kvno -= 100000;
+
 			if (kdc_db_ctx->rodc) {
 				if (krbtgt_number != kdc_db_ctx->my_krbtgt_number) {
 					return SDB_ERR_NOT_FOUND_HERE;