diff --git a/selftest/knownfail.d/samba.tests.krb5.netlogon b/selftest/knownfail.d/samba.tests.krb5.netlogon
index c6a6273cd80..0f8d4c3fa3d 100644
--- a/selftest/knownfail.d/samba.tests.krb5.netlogon
+++ b/selftest/knownfail.d/samba.tests.krb5.netlogon
@@ -2,3 +2,7 @@
 ^samba.tests.krb5.netlogon.*.test_wks1_authenticate_flags
 # This is not implemented yet
 ^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_ticket_samlogon
+# These will be fixed in the next commits
+^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_check_passwords_.*_auth3_e13fffff
+^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_check_passwords_.*_authK
+^samba.tests.krb5.netlogon.*.NetlogonSchannel.test_.*_samlogon_.*_authK
diff --git a/selftest/target/Samba4.pm b/selftest/target/Samba4.pm
index cfa8200c3ef..923cc744e35 100755
--- a/selftest/target/Samba4.pm
+++ b/selftest/target/Samba4.pm
@@ -2096,6 +2096,7 @@ sub provision_ad_dc()
 	lpq cache time = 0
 	print notify backchannel = yes
 
+	server support krb5 netlogon = yes
 	CVE_2020_1472:warn_about_unused_debug_level = 3
 	CVE_2022_38023:warn_about_unused_debug_level = 3
 	CVE_2022_38023:error_debug_level = 2
diff --git a/source4/selftest/tests.py b/source4/selftest/tests.py
index 4aa37efdc1b..76dd3c68841 100755
--- a/source4/selftest/tests.py
+++ b/source4/selftest/tests.py
@@ -1996,7 +1996,7 @@ for env in ["ad_dc"]:
                                **krb5_environ,
                                'FAST_SUPPORT': fast_support,
                                'NETLOGON_STRONG_KEY_SUPPORT': '0',
-                               'NETLOGON_AUTH_KRB5_SUPPORT': '0',
+                               'NETLOGON_AUTH_KRB5_SUPPORT': '1',
                            })
 
 planoldpythontestsuite('fl2008r2dc', 'samba.tests.krb5.salt_tests',