diff --git a/lib/gssapi/ntlm/accept_sec_context.c b/lib/gssapi/ntlm/accept_sec_context.c
index 324d8ec18..97c309e7f 100644
--- a/lib/gssapi/ntlm/accept_sec_context.c
+++ b/lib/gssapi/ntlm/accept_sec_context.c
@@ -164,6 +164,11 @@ handle_type3(OM_uint32 *minor_status,
     if (ret)
 	goto out;
 
+    if (krb5_ntlm_rep_get_status(ctx->context, ctx->ntlm) != TRUE) {
+	ret = EINVAL;
+	goto out;
+    }
+
     return GSS_S_COMPLETE;
 out:
     *minor_status = ret;