diff --git a/kdc/altsecid_gss_preauth_authorizer.c b/kdc/altsecid_gss_preauth_authorizer.c
index ae1edb1d4..8acce3a80 100644
--- a/kdc/altsecid_gss_preauth_authorizer.c
+++ b/kdc/altsecid_gss_preauth_authorizer.c
@@ -201,7 +201,7 @@ ad_connect(krb5_context context,
     }
 
 #ifdef LDAP_OPT_X_SASL_GSS_CREDS
-    if (server->gss_cred != GSS_C_NO_CREDENTIAL) {
+    if (server->gss_cred == GSS_C_NO_CREDENTIAL) {
         ret = ad_acquire_cred(context, realm, server);
         if (ret)
             goto out;