diff --git a/backend/ldap.go b/backend/ldap.go
index 48f13b70925d370e67719c741c4c399b29cc419b..c73b7f12f3fd00d23c7a81aa554ed79b854d5432 100644
--- a/backend/ldap.go
+++ b/backend/ldap.go
@@ -50,10 +50,10 @@ func (c *LDAPQueryConfig) Valid() error {
 	// attributes, it's more practical to set defaults rather than
 	// complain if values are unset.
 	if c.PublicKeyAttr == "" {
-		c.PublicKeyAttr = "userPublicKey"
+		c.PublicKeyAttr = "storagePublicKey"
 	}
 	if c.PrivateKeyAttr == "" {
-		c.PrivateKeyAttr = "userEncryptedKey"
+		c.PrivateKeyAttr = "storageEncryptedSecretKey"
 	}
 	return nil
 }