diff --git a/auth/kerb5.c b/auth/kerb5.c
index 6b08090dc..cd1078b12 100644
--- a/auth/kerb5.c
+++ b/auth/kerb5.c
@@ -55,7 +55,7 @@ __unused static const char rcsid[] = "$Sudo$";
 #endif /* lint */
 
 #ifdef HAVE_HEIMDAL
-# define extract_name(c, p)		krb5_principal_get_comp_string(c, p, 0)
+# define extract_name(c, p)		krb5_principal_get_comp_string(c, p, 1)
 # define krb5_free_data_contents(c, d)	krb5_data_free(d)
 # define ENCTYPE_DES_CBC_MD5		ETYPE_DES_CBC_MD5	/* XXX */
 #else