* in a TGS REP even if the client did not specify
* the canonicalize flag.
*/
- if (flags & HDB_F_CANON|HDB_F_FOR_TGS_REQ) {
+ if (flags & (HDB_F_CANON|HDB_F_FOR_TGS_REQ)) {
ret = krb5_copy_principal(context, principal, &alloc_principal);
if (ret) {
return ret;