diff --git a/kcm/protocol.c b/kcm/protocol.c
index 89300a623..1495ab937 100644
--- a/kcm/protocol.c
+++ b/kcm/protocol.c
@@ -316,8 +316,8 @@ kcm_op_retrieve(krb5_context context,
     }
 
     if (disallow_getting_krbtgt &&
-	mcreds.client->name.name_string.len == 2 &&
-	strcmp(mcreds.client->name.name_string.val[0], KRB5_TGS_NAME) == 0)
+	mcreds.server->name.name_string.len == 2 &&
+	strcmp(mcreds.server->name.name_string.val[0], KRB5_TGS_NAME) == 0)
     {
 	free(name);
 	krb5_free_creds_contents(context, &mcreds);