diff --git a/lib/fudo/ldap.nix b/lib/fudo/ldap.nix
index 3801d1b..883235c 100644
--- a/lib/fudo/ldap.nix
+++ b/lib/fudo/ldap.nix
@@ -256,6 +256,8 @@ in {
           ${build-ca-script ca-path
             cfg.ssl-chain
             cfg.ssl-ca-certificate}
+          # The script is failing to do this
+          chown "${user}:${group}" /etc/openldap
         '';
         serviceConfig = {
           PrivateDevices = true;