diff --git a/servers/slapd/sasl.c b/servers/slapd/sasl.c
index e3fd7fbcd7..7a3b21921f 100644
--- a/servers/slapd/sasl.c
+++ b/servers/slapd/sasl.c
@@ -99,9 +99,9 @@ int slap_sasl_getdn( Connection *conn, char *id, char **dnptr, int flags )
 
 
 	/* Blatantly anonymous ID */
-	len = strlen( "anonymous" );
-	if( id && !strncasecmp( id, "anonymous", len) && 
-		( id[len] == '\0' || id[len] == '@' ) ) {
+	len = sizeof( "anonymous" ) - 1;
+	if( id && ( id[len] == '\0' || id[len] == '@' ) &&
+		!strncasecmp( id, "anonymous", len) ) {
 		*dnptr = NULL;
 		return( LDAP_SUCCESS );
 	}