944     principal = kr->creds ? kr->creds->client : kr->princ;
 945     
 946     /* If kr->ccname is cache collection (DIR:/...), we want to work
 947      * directly with file ccache (DIR::/...), but cache collection
 948      * should be returned back to back end.
 949      */
 950     cc_name = sss_get_ccache_name_for_principal(kr->pd, kr->ctx, principal,
 951                                                 kr->ccname);
 952     if (cc_name == NULL) {
 953         cc_name = kr->ccname;
 954     }
 955 
 956     /* Use the updated principal in the creds in case canonicalized */
 957     kerr = create_ccache(cc_name, kr->creds);
 958     if (kerr != 0) {
 959         KRB5_CHILD_DEBUG(SSSDBG_CRIT_FAILURE, kerr);
 960         goto done; 
 961     }