diff --git a/servers/slapd/bind.c b/servers/slapd/bind.c
index b769e8b44b..15055120b4 100644
--- a/servers/slapd/bind.c
+++ b/servers/slapd/bind.c
@@ -406,7 +406,7 @@ do_bind(
 			goto cleanup;
 
 		} else if (( global_disallows & SLAP_DISALLOW_BIND_SIMPLE_UNPROTECTED )
-			&& ( op->o_transport_ssf < global_ssf_set.sss_transport ))
+			&& ( op->o_ssf < global_ssf_set.sss_ssf ))
 		{
 			rc = LDAP_CONFIDENTIALITY_REQUIRED;
 			text = "unwilling to perform simple authentication "