ldap: run service in group openldap

roles/ldap/tasks/main.yml

@@ -44,11 +44,6 @@
     home: /var/lib/ldap
     createhome: no
     system: yes
-- name: Add slapd-prometheus-exporter to ldap group
-  user:
-    name: slapd-prometheus-exporter
-    groups: openldap
-    append: yes
 
 # Make sure the monitoring exporter can access the LDAP socket.
 - file:
@@ -59,7 +54,7 @@
     dest: /etc/systemd/system/slapd-prometheus-exporter.service.d/float.conf
     content: |
       [Service]
-      Group: openldap
+      Group=openldap
   notify: reload slapd-prometheus-exporter
 
 # Install the LDAP configuration