diff --git a/lib/krb5/init_creds_pw.c b/lib/krb5/init_creds_pw.c
index d24700156..dc375c5a2 100644
--- a/lib/krb5/init_creds_pw.c
+++ b/lib/krb5/init_creds_pw.c
@@ -1150,8 +1150,8 @@ process_pa_data_to_key(krb5_context context,
     if (pa && ctx->pk_init_ctx) {
 #ifdef PKINIT
 	ret = _krb5_pk_rd_pa_reply(context,
-				   ctx->pk_init_ctx,
 				   a->req_body.realm,
+				   ctx->pk_init_ctx,
 				   etype,
 				   hi,
 				   ctx->pk_nonce,