diff --git a/src/XrdSecgsi/XrdSecProtocolgsi.cc b/src/XrdSecgsi/XrdSecProtocolgsi.cc
index b4b704b4505..7baf15f6446 100644
--- a/src/XrdSecgsi/XrdSecProtocolgsi.cc
+++ b/src/XrdSecgsi/XrdSecProtocolgsi.cc
@@ -3241,6 +3241,7 @@ int XrdSecProtocolgsi::ClientDoCert(XrdSutBuffer *br, XrdSutBuffer **bm,
           {hs->Options &= ~(kOptsFwdPxy | kOptsSigReq);
            std::cerr <<"secgsi: proxy delegation forbidden when trusting DNS "
                        "to resolve '" <<wantHost <<"'!\n" <<std::flush;
+           return -1;
           }
       }