diff --git a/lib/Connector/Builtin/Authentication/LDAP.pm b/lib/Connector/Builtin/Authentication/LDAP.pm
index 75c253c..fb6b527 100644
--- a/lib/Connector/Builtin/Authentication/LDAP.pm
+++ b/lib/Connector/Builtin/Authentication/LDAP.pm
@@ -137,6 +137,10 @@ sub _check_user_password {
         }
     }
 
+    # purge last binding information to enforce use of search bind user
+    # when indirect mode is enabled
+    $self->_purge_bind() if $self->indirect();
+
     if(!defined $userdn) {
       $self->log()->warn('Authentication failed');
       return 0;