diff --git a/servers/slapd/connection.c b/servers/slapd/connection.c
index 34ecaa85af..a9a8d119fa 100644
--- a/servers/slapd/connection.c
+++ b/servers/slapd/connection.c
@@ -535,7 +535,7 @@ Connection * connection_init(
 	c->c_close_reason = "?";			/* should never be needed */
 
 	c->c_ssf = c->c_transport_ssf = ssf;
-	c->c_tls_ssf = 0;
+	c->c_tls_ssf = c->c_sasl_ssf = 0;
 
 #ifdef HAVE_TLS
 	if ( flags & CONN_IS_TLS ) {