diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index ed74400d7..92472f094 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -1422,9 +1422,6 @@ _kdc_pk_check_client(krb5_context context,
 
     if (client_params->cert == NULL) {
 
-	if (!_kdc_is_anonymous(context, client->entry.principal))
-	    return KRB5_KDC_ERR_CLIENT_NAME_MISMATCH;
-
 	*subject_name = strdup("anonymous client client");
 	if (*subject_name == NULL)
 	    return ENOMEM;