diff --git a/servers/slapd/syncrepl.c b/servers/slapd/syncrepl.c
index 2af17cd30b..62b0cd309a 100644
--- a/servers/slapd/syncrepl.c
+++ b/servers/slapd/syncrepl.c
@@ -303,6 +303,9 @@ do_syncrep1(
 		}
 	}
 
+	/* set SSF for local authorization */
+	ldap_get_option( si->si_ld, LDAP_OPT_X_SASL_SSF, &op->o_ssf );
+
 	/* get syncrepl cookie of shadow replica from subentry */
 	assert( si->si_rid < 1000 );
 	syncrepl_cn_bv.bv_val = syncrepl_cbuf;