diff --git a/clients/tools/common.c b/clients/tools/common.c
index 613bfb7b1a..0369e3dcb7 100644
--- a/clients/tools/common.c
+++ b/clients/tools/common.c
@@ -1001,8 +1001,8 @@ tool_bind( LDAP *ld )
 	int		nsctrls = 0;
 
 #ifdef LDAP_CONTROL_PASSWORDPOLICYREQUEST
+	LDAPControl c;
 	if ( ppolicy ) {
-		LDAPControl c;
 		c.ldctl_oid = LDAP_CONTROL_PASSWORDPOLICYREQUEST;
 		c.ldctl_value.bv_val = NULL;
 		c.ldctl_value.bv_len = 0;