krb5_is_tgs_principal
if (firstpass && krb5_is_tgs_principal(request->server) == TRUE) {
if (!krb5_is_tgs_principal(ticket->server)) {
krb5_boolean krb5_is_tgs_principal (krb5_principal);