diff --git a/service/ccm/credential_external.go b/service/ccm/credential_external.go
index c0714641a..deb8436f4 100644
--- a/service/ccm/credential_external.go
+++ b/service/ccm/credential_external.go
@@ -372,9 +372,6 @@ func (c *externalCredential) earliestReset() time.Time {
 }
 
 func (c *externalCredential) unavailableError() error {
-	if c.reverse && c.connectorURL != nil {
-		return E.New("credential ", c.tag, " is unavailable: reverse connector credentials cannot serve local requests")
-	}
 	if c.baseURL == reverseProxyBaseURL {
 		session := c.getReverseSession()
 		if session == nil || session.IsClosed() {
diff --git a/service/ocm/credential_external.go b/service/ocm/credential_external.go
index 222a22e94..29a80a909 100644
--- a/service/ocm/credential_external.go
+++ b/service/ocm/credential_external.go
@@ -197,6 +197,7 @@ func newExternalCredential(ctx context.Context, tag string, options option.OCMEx
 
 		if options.Reverse {
 			// Connector mode: we dial out to serve, not to proxy
+			credential.credentialDialer = credentialDialer
 			credential.connectorDialer = credentialDialer
 			if options.Server != "" {
 				credential.connectorDestination = M.ParseSocksaddrHostPort(options.Server, externalCredentialServerPort(parsedURL, options.ServerPort))
@@ -407,9 +408,6 @@ func (c *externalCredential) earliestReset() time.Time {
 }
 
 func (c *externalCredential) unavailableError() error {
-	if c.reverse && c.connectorURL != nil {
-		return E.New("credential ", c.tag, " is unavailable: reverse connector credentials cannot serve local requests")
-	}
 	if c.baseURL == reverseProxyBaseURL {
 		session := c.getReverseSession()
 		if session == nil || session.IsClosed() {