diff --git a/manifests/client.pp b/manifests/client.pp
index 68aefefe..7ceec869 100644
--- a/manifests/client.pp
+++ b/manifests/client.pp
@@ -421,7 +421,7 @@
 
     concat::fragment { "${etc_directory}/openvpn/${server}/download-configs/${name}.ovpn/tls_auth_close_tag":
       target  => "${etc_directory}/openvpn/${server}/download-configs/${name}.ovpn",
-      content => "</tls-auth>\n",
+      content => "</tls-auth>\nkey-direction 1\n",
       order   => '13'
     }
   }
diff --git a/manifests/server.pp b/manifests/server.pp
index f4e16580..b48d45ca 100644
--- a/manifests/server.pp
+++ b/manifests/server.pp
@@ -682,6 +682,8 @@
     file {
       "${etc_directory}/openvpn/${name}/auth/ldap.conf":
         ensure  => present,
+        owner   => root,
+        mode    => '0400',
         content => template('openvpn/ldap.erb'),
         require => Package['openvpn-auth-ldap'],
     }