diff --git a/lib/krb5/verify_init.c b/lib/krb5/verify_init.c
index 7e739f026..821ad61dd 100644
--- a/lib/krb5/verify_init.c
+++ b/lib/krb5/verify_init.c
@@ -64,9 +64,9 @@ fail_verify_is_ok (krb5_context context,
 				 "libdefaults",
 				 "verify_ap_req_nofail",
 				 NULL))
-	return TRUE;
-    else
 	return FALSE;
+    else
+	return TRUE;
 }
 
 krb5_error_code
diff --git a/lib/krb5/verify_user.c b/lib/krb5/verify_user.c
index a65ebc7a2..bc49e019c 100644
--- a/lib/krb5/verify_user.c
+++ b/lib/krb5/verify_user.c
@@ -55,7 +55,7 @@ verify_common (krb5_context context,
 	return ret;
 
     krb5_verify_init_creds_opt_init(&vopt);
-    krb5_verify_init_creds_opt_set_ap_req_nofail(&vopt, !secure);
+    krb5_verify_init_creds_opt_set_ap_req_nofail(&vopt, secure);
 
     ret = krb5_verify_init_creds(context,
 				 &cred,