diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index a7a0addcf..56c62ea34 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -1199,12 +1199,12 @@ next_kvno:
 	    ret = KRB5KRB_AP_ERR_BAD_INTEGRITY; /* ? */
 	    goto out;
 	}
-
-	ret = validate_fast_ad(r, *auth_data);
-	if (ret)
-	    goto out;
     }
 
+    ret = validate_fast_ad(r, (*ticket)->ticket.authorization_data);
+    if (ret)
+	goto out;
+
     
     /*
      * Check for FAST request