debian: run as Group=openldap to read ldap dir

root@host2:~# ls -lad /var/run/ldap/
drwxr-x--- 2 openldap openldap 100 Aug 14 16:47 /var/run/ldap/

debian/ai-webdav-auth-server.service

@@ -4,7 +4,7 @@ After=network.target
 
 [Service]
 User=ai-webdav-auth-server
-Group=ai-webdav-auth-server
+Group=openldap
 EnvironmentFile=-/etc/default/ai-webdav-auth-server
 ExecStart=/usr/bin/ai-webdav-auth-server $ARGS
 Restart=always