diff --git a/lib/krb5/kuserok.c b/lib/krb5/kuserok.c
index 7a7de452a..97f4a9c9f 100644
--- a/lib/krb5/kuserok.c
+++ b/lib/krb5/kuserok.c
@@ -448,7 +448,7 @@ out:
 
 KRB5_LIB_FUNCTION krb5_boolean KRB5_LIB_CALL
 krb5_kuserok(krb5_context context,
-	     krb5_principal principal,
+	     krb5_const_principal principal,
 	     const char *luser)
 {
     return _krb5_kuserok(context, principal, luser, TRUE);
@@ -468,7 +468,7 @@ kuserok_plugin_data = {
 
 KRB5_LIB_FUNCTION krb5_boolean KRB5_LIB_CALL
 _krb5_kuserok(krb5_context context,
-	      krb5_principal principal,
+	      krb5_const_principal principal,
 	      const char *luser,
 	      krb5_boolean an2ln_ok)
 {