diff --git a/lib/krb5/krb5_get_credentials.3 b/lib/krb5/krb5_get_credentials.3
index 4ab4208a8..138f6c62c 100644
--- a/lib/krb5/krb5_get_credentials.3
+++ b/lib/krb5/krb5_get_credentials.3
@@ -38,7 +38,8 @@
 .Nm krb5_get_credentials ,
 .Nm krb5_get_credentials_with_flags ,
 .Nm krb5_get_cred_from_kdc ,
-.Nm krb5_get_cred_from_kdc_opt
+.Nm krb5_get_cred_from_kdc_opt ,
+.Nm krb5_get_kdc_cred
 .Nd get credentials from the KDC using krbtgt
 .Sh LIBRARY
 Kerberos 5 Library (libkrb5, -lkrb5)
@@ -78,6 +79,16 @@ Kerberos 5 Library (libkrb5, -lkrb5)
 .Fa "krb5_creds ***ret_tgts"
 .Fa "krb5_flags flags"
 .Fc
+.Ft krb5_error_code
+.Fo krb5_get_kdc_cred
+.Fa "krb5_context context"
+.Fa "krb5_ccache id"
+.Fa "krb5_kdc_flags flags"
+.Fa "krb5_addresses *addresses"
+.Fa "Ticket  *second_ticket"
+.Fa "krb5_creds *in_creds"
+.Fa "krb5_creds **out_creds"
+.Fc
 .Sh DESCRIPTION
 .Fn krb5_get_credentials_with_flags
 get credentials by first looking in the
@@ -118,6 +129,10 @@ fetches the credential from the KDC very much like
 .Fn krb5_get_credentials, but doesn't look in the
 .Fa ccache
 if the credential exists there first.
+.Pp
+.Fn krb5_get_kdc_cred
+does the same as the functions above, but the caller must fill in all
+the information andits closer to the wire protocol.
 .Sh SEE ALSO
 .Xr krb5 3 ,
 .Xr krb5_get_forwarded_creds 3 ,