diff --git a/clients/tools/ldappasswd.c b/clients/tools/ldappasswd.c
index ec96349ec7977377d264d807c57626e2c4286206..aa81513dd9ad7a9c8bfa5a49aa1ab6743cdc70e3 100644
--- a/clients/tools/ldappasswd.c
+++ b/clients/tools/ldappasswd.c
@@ -349,7 +349,7 @@ main( int argc, char *argv[] )
 		
 		rc = ldap_negotiated_sasl_bind_s( ld, binddn, sasl_authc_id,
 				sasl_authz_id, sasl_mech,
-				bindpw.bv_len ? &bindpw : NULL,
+				passwd.bv_len ? &passwd : NULL,
 				NULL, NULL );
 
 		if( rc != LDAP_SUCCESS ) {