diff --git a/kcm/client.c b/kcm/client.c
index d61c849e1..fdc752cf6 100644
--- a/kcm/client.c
+++ b/kcm/client.c
@@ -118,7 +118,7 @@ kcm_ccache_new_client(krb5_context context,
 	}
 
 	/* Allow root to create badly-named ccaches */
-	if (bad && CLIENT_IS_ROOT(client))
+	if (bad && !CLIENT_IS_ROOT(client))
 	    return KRB5_CC_BADNAME;
     }