diff --git a/lib/krb5/principal.c b/lib/krb5/principal.c
index 27efcab11..9a7696e45 100644
--- a/lib/krb5/principal.c
+++ b/lib/krb5/principal.c
@@ -1681,7 +1681,7 @@ _krb5_get_name_canon_rules(krb5_context context, krb5_name_canon_rule *rules)
 
     if (realm) {
 	values = krb5_config_get_strings(context, NULL,
-					 "libdefaults",
+					 "realms",
 					 realm,
 					 "name_canon_rules", NULL);
 	free(realm);