diff --git a/source3/auth/auth_util.c b/source3/auth/auth_util.c
index 1362956e0a9..05a530d1761 100644
--- a/source3/auth/auth_util.c
+++ b/source3/auth/auth_util.c
@@ -1100,6 +1100,7 @@ bool user_in_group_sid(const char *username, const DOM_SID *group_sid)
 
 	if (!NT_STATUS_IS_OK(status)) {
 		DEBUG(10, ("could not create token for %s\n", username));
+		TALLOC_FREE(mem_ctx);
 		return False;
 	}