--- a/clients/tools/common.c
+++ b/clients/tools/common.c
@@ -1315,8 +1315,8 @@
 	int		nsctrls = 0;
 
 #ifdef LDAP_CONTROL_PASSWORDPOLICYREQUEST
+	LDAPControl c;
 	if ( ppolicy ) {
-		LDAPControl c;
 		c.ldctl_oid = LDAP_CONTROL_PASSWORDPOLICYREQUEST;
 		c.ldctl_value.bv_val = NULL;
 		c.ldctl_value.bv_len = 0;