diff --git a/servers/slapd/bind.c b/servers/slapd/bind.c
index 1e2fdbc36b..e825eeb850 100644
--- a/servers/slapd/bind.c
+++ b/servers/slapd/bind.c
@@ -338,8 +338,6 @@ do_bind(
 		goto cleanup;
 	}
 
-	conn->c_authz_backend = be;
-
 	/* check restrictions */
 	rc = backend_check_restrictions( be, conn, op, NULL, &text ) ;
 	if( rc != LDAP_SUCCESS ) {
@@ -348,6 +346,8 @@ do_bind(
 		goto cleanup;
 	}
 
+	conn->c_authz_backend = be;
+
 	if ( be->be_bind ) {
 		int ret;
 		/* alias suffix */