diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index e09e0beb9..aa66e7d00 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -875,7 +875,7 @@ tgs_check_authenticator(krb5_auth_context ac,
 out:
     free_Authenticator(auth);
     free(auth);
-    return 0;
+    return ret;
 }