From ea7ed5a5687f45ecd1a8592e2a25d82241135c81 Mon Sep 17 00:00:00 2001
From: Jonathan DeMasi <me@jthan.io>
Date: Sun, 25 Jan 2026 19:57:53 -0700
Subject: [PATCH] fix acls maybe

---
 ansible/roles/openldap_server/tasks/acls.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ansible/roles/openldap_server/tasks/acls.yaml b/ansible/roles/openldap_server/tasks/acls.yaml
index 2b68cef..500938f 100644
--- a/ansible/roles/openldap_server/tasks/acls.yaml
+++ b/ansible/roles/openldap_server/tasks/acls.yaml
@@ -15,6 +15,10 @@
           to attrs=uid
           by anonymous read
           by * none
+        - >-
+          to attrs=cn,description,member,uniqueMember,memberUid
+          by * read
+          by * none
         - >-
           to *
           by * read