diff --git a/kdc/kdc_locl.h b/kdc/kdc_locl.h
index 4dc825f67..39758c52e 100644
--- a/kdc/kdc_locl.h
+++ b/kdc/kdc_locl.h
@@ -134,6 +134,7 @@ krb5_error_code pk_rd_padata(krb5_context, KDC_REQ *,
 krb5_error_code pk_mk_pa_reply(krb5_context, pk_client_params *,
 			       krb5_keyblock **, METHOD_DATA *);
 krb5_error_code pk_check_client(krb5_context, krb5_principal,
+				const hdb_entry *, 
 				pk_client_params *, char **);
 void pk_free_client_param(krb5_context, pk_client_params *);
 #endif
diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index 3aed1fd27..cc264c66b 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -952,6 +952,7 @@ pk_mk_pa_reply(krb5_context context,
 krb5_error_code
 pk_check_client(krb5_context context,
                 krb5_principal client_princ,
+		const hdb_entry *client,
                 pk_client_params *client_params,
 		char **subject_name)
 {