diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 1ff6714d9..532c29e6b 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -481,6 +481,13 @@ _kdc_encode_reply(krb5_context context,
 			      data.data, data.length);
 	if (ret)
 	    return ret;
+
+	/*
+	 * Hide client name of privacy reasons
+	 */
+	rep->crealm[0] = '\0';
+	free_PrincipalName(&rep->cname);
+	rep->cname.name_type = 0;
     }
 
     if(rep->msg_type == krb_as_rep && !config->encode_as_rep_as_tgs_rep)