diff --git a/servers/slapd/back-ldap/init.c b/servers/slapd/back-ldap/init.c
index e2db2a0947..ec32e3ccb6 100644
--- a/servers/slapd/back-ldap/init.c
+++ b/servers/slapd/back-ldap/init.c
@@ -214,6 +214,11 @@ ldap_back_db_open( BackendDB *be, ConfigReply *cr )
 		"ldap_back_db_open: URI=%s\n",
 		li->li_uri != NULL ? li->li_uri : "" );
 
+	if ( be->be_suffix == NULL ) {
+		Debug( LDAP_DEBUG_ANY, "ldap_back_db_open: need suffix.\n" );
+		return -1;
+	}
+
 	/* by default, use proxyAuthz control on each operation */
 	switch ( li->li_idassert_mode ) {
 	case LDAP_BACK_IDASSERT_LEGACY: