From dd8e764b5c3614dd8d21c03c091a5895f5b33a26 Mon Sep 17 00:00:00 2001
From: Jonathan DeMasi <me@jthan.io>
Date: Sun, 25 Jan 2026 20:14:36 -0700
Subject: [PATCH] oh we had a line for that

---
 ansible/roles/openldap_server/tasks/acls.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ansible/roles/openldap_server/tasks/acls.yaml b/ansible/roles/openldap_server/tasks/acls.yaml
index 9f66641..985e3ad 100644
--- a/ansible/roles/openldap_server/tasks/acls.yaml
+++ b/ansible/roles/openldap_server/tasks/acls.yaml
@@ -13,10 +13,11 @@
           by * none
         - >-
           to attrs=uid
+          by * read
           by anonymous read
           by * none
         - >-
-          to attrs=cn,description,member,uniqueMember,memberUid,uid
+          to attrs=cn,description,member,uniqueMember,memberUid
           by * read
           by * none
         - >-