diff --git a/lib/krb5/crypto-stubs.c b/lib/krb5/crypto-stubs.c
index b46268064..ea3101871 100644
--- a/lib/krb5/crypto-stubs.c
+++ b/lib/krb5/crypto-stubs.c
@@ -90,6 +90,15 @@ krb5_log(krb5_context context,
     return 0;
 }
 
+void KRB5_LIB_FUNCTION
+_krb5_debug(krb5_context context,
+	    int level,
+	    const char *fmt,
+	    ...)
+{
+}
+
+
 /* This function is currently just used to get the location of the EGD
  * socket. If we're not using an EGD, then we can just return NULL */
 
diff --git a/lib/krb5/error_string.c b/lib/krb5/error_string.c
index 9759fb2f5..cbcb288a2 100644
--- a/lib/krb5/error_string.c
+++ b/lib/krb5/error_string.c
@@ -115,6 +115,8 @@ krb5_vset_error_message (krb5_context context, krb5_error_code ret,
     if (r < 0)
 	context->error_string = NULL;
     HEIMDAL_MUTEX_unlock(context->mutex);
+    if (context->error_string)
+	_krb5_debug(context, 100, "error message: %s: %d", context->error_string, ret);
 }
 
 /**