diff --git a/source3/libsmb/cliconnect.c b/source3/libsmb/cliconnect.c
index 2a84b69faa6..096d8cb24a7 100644
--- a/source3/libsmb/cliconnect.c
+++ b/source3/libsmb/cliconnect.c
@@ -403,6 +403,8 @@ static BOOL cli_session_setup_kerberos(struct cli_state *cli, char *principal, c
 	/* we don't need this blob for kerberos */
 	data_blob_free(&blob2);
 
+	data_blob_free(&negTokenTarg);
+
 	return !cli_is_error(cli);
 }
 #endif