diff --git a/data/hooks/conf_regen/06-slapd b/data/hooks/conf_regen/06-slapd
index 4c3c0b8e7..55f323438 100755
--- a/data/hooks/conf_regen/06-slapd
+++ b/data/hooks/conf_regen/06-slapd
@@ -15,6 +15,7 @@ do_init_regen() {
   # fix some permissions
   chown root:openldap /etc/ldap/slapd.conf
   chown -R openldap:openldap /etc/ldap/schema/
+  usermod -aG ssl-cert openldap
 
   # check the slapd config file at first
   slaptest -Q -u -f /etc/ldap/slapd.conf