diff --git a/lib/gss_preauth/pa_common.c b/lib/gss_preauth/pa_common.c
index c2287ca70..0e6326cbf 100644
--- a/lib/gss_preauth/pa_common.c
+++ b/lib/gss_preauth/pa_common.c
@@ -65,10 +65,11 @@ _krb5_gss_map_error(OM_uint32 major, OM_uint32 minor)
         break;
     case GSS_S_FAILURE:
         if (minor == (OM_uint32)KRB5KRB_AP_ERR_BAD_INTEGRITY ||
-            minor == (OM_uint32)HNTLM_ERR_AUTH) {
+            minor == (OM_uint32)HNTLM_ERR_AUTH)
             ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
-            break;
-        }
+        else
+            ret = KRB5KDC_ERR_PREAUTH_FAILED;
+        break;
     default:
         ret = KRB5KDC_ERR_PREAUTH_FAILED;
         break;