diff --git a/lib/krb5/init_creds_pw.c b/lib/krb5/init_creds_pw.c
index 04b3f890e..f74e67671 100644
--- a/lib/krb5/init_creds_pw.c
+++ b/lib/krb5/init_creds_pw.c
@@ -2074,6 +2074,10 @@ krb5_init_creds_step(krb5_context context,
 	    if (ret)
 		goto out;
 
+	    /*
+	     * Now check and extract the ticket
+	     */
+
 	    if (ctx->flags.canonicalize) {
 		eflags |= EXTRACT_TICKET_ALLOW_SERVER_MISMATCH;
 		eflags |= EXTRACT_TICKET_MATCH_REALM;