diff --git a/libraries/libldap/cyrus.c b/libraries/libldap/cyrus.c
index 5591682746..c9a5a46243 100644
--- a/libraries/libldap/cyrus.c
+++ b/libraries/libldap/cyrus.c
@@ -1035,7 +1035,7 @@ ldap_int_sasl_get_option( LDAP *ld, int option, void *arg )
 				return -1;
 			}
 
-			*(char **)arg = username;
+			*(char **)arg = username ? LDAP_STRDUP( username ) : NULL;
 		} break;
 
 		case LDAP_OPT_X_SASL_SECPROPS: