diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index 6000ac2c5e..1333ad3bfb 100644
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -2183,6 +2183,7 @@ tgs_build_reply(krb5_context context,
     if (client != NULL
 	&& b->additional_tickets != NULL
 	&& b->additional_tickets->len != 0
+	&& b->kdc_options.cname_in_addl_tkt
 	&& b->kdc_options.enc_tkt_in_skey == 0)
     {
 	int ad_signedpath = 0;