diff --git a/servers/slapd/sasl.c b/servers/slapd/sasl.c
index 2bfd7efc1e..29a83f5ada 100644
--- a/servers/slapd/sasl.c
+++ b/servers/slapd/sasl.c
@@ -224,7 +224,7 @@ int slap_sasl_getdn( Connection *conn, char *id, char **dnptr, int flags )
 	}
 
 	if( ( flags & FLAG_GETDN_FINAL ) == 0 )	 {
-		dn_normalize( dn );
+		dn_normalize( dn+3 );
 	}
 
 	*dnptr = dn;