diff --git a/builtin/credential/ldap/path_login.go b/builtin/credential/ldap/path_login.go
index 1e3a90451..58e36cbfa 100644
--- a/builtin/credential/ldap/path_login.go
+++ b/builtin/credential/ldap/path_login.go
@@ -76,7 +76,7 @@ func (b *backend) pathLoginRenew(
 
 	sort.Strings(policies)
 	if strings.Join(policies, ",") != prevpolicies {
-		return logical.ErrorResponse("policies have changed, revoking login"), nil
+		return logical.ErrorResponse("policies have changed, not renewing"), nil
 	}
 
 	return framework.LeaseExtend(0, 0, b.System())(req, d)