diff --git a/servers/slapd/overlays/ppolicy.c b/servers/slapd/overlays/ppolicy.c
index 83da96c3ee..2900c64c31 100644
--- a/servers/slapd/overlays/ppolicy.c
+++ b/servers/slapd/overlays/ppolicy.c
@@ -2138,8 +2138,10 @@ ppolicy_close(
 
 	/* Perhaps backover should provide bi_destroy hooks... */
 	ov_count--;
-	if ( !ov_count )
+	if ( ov_count <=0 && pwcons ) {
 		free( pwcons );
+		pwcons = NULL;
+	}
 	free( pi->def_policy.bv_val );
 	free( pi );