diff --git a/lib/krb5/get_for_creds.c b/lib/krb5/get_for_creds.c
index 34ec775a7..a061532b3 100644
--- a/lib/krb5/get_for_creds.c
+++ b/lib/krb5/get_for_creds.c
@@ -279,11 +279,11 @@ krb5_get_forwarded_creds (krb5_context	    context,
 
     if (auth_context->local_address && auth_context->local_port) {
 	krb5_boolean noaddr;
-	krb5_const_realm realm;
+	krb5_const_realm srealm;
 
-	realm = krb5_principal_get_realm(context, out_creds->server);
-	krb5_appdefault_boolean(context, NULL, realm, "no-addresses", paddrs == NULL,
-				&noaddr);
+	srealm = krb5_principal_get_realm(context, out_creds->server);
+	krb5_appdefault_boolean(context, NULL, srealm, "no-addresses", 
+				paddrs == NULL,	&noaddr);
 	if (!noaddr) {
 	    ret = krb5_make_addrport (context,
 				      &enc_krb_cred_part.s_address,
@@ -297,15 +297,15 @@ krb5_get_forwarded_creds (krb5_context	    context,
     if (auth_context->remote_address) {
 	if (auth_context->remote_port) {
 	    krb5_boolean noaddr;
-	    krb5_const_realm realm;
+	    krb5_const_realm srealm;
 
-	    realm = krb5_principal_get_realm(context, out_creds->server);
+	    srealm = krb5_principal_get_realm(context, out_creds->server);
 	    /* Is this correct, and should we use the paddrs == NULL
                trick here as well? Having an address-less ticket may
                indicate that we don't know our own global address, but
                it does not necessary mean that we don't know the
                server's. */
-	    krb5_appdefault_boolean(context, NULL, realm, "no-addresses",
+	    krb5_appdefault_boolean(context, NULL, srealm, "no-addresses",
 				    FALSE, &noaddr);
 	    if (!noaddr) {
 		ret = krb5_make_addrport (context,