Note for the future: do not place a systemd service behind a user using LDAP to authenticate.