diff --git a/ldap-account-manager/Dockerfile b/ldap-account-manager/Dockerfile
index f89d5056a1b9b0373fb3b3673544b8ccc7615838..0f5efd6a3dd00034374b49e87cb24fdd7924b78c 100644
--- a/ldap-account-manager/Dockerfile
+++ b/ldap-account-manager/Dockerfile
@@ -1,4 +1,4 @@
-FROM debian:buster-slim
+FROM debian:sid-slim
 RUN apt-get update && \
     DEBIAN_FRONTEND=noninteractive apt-get install -y --no-install-recommends \
         ldap-account-manager\
diff --git a/ldap-account-manager/README.md b/ldap-account-manager/README.md
index 9ff062e4d9a4c54a2c6692374bdd58fe52c331bc..e3462c52713ddc99a21a952ab8773f0b8fd219b4 100644
--- a/ldap-account-manager/README.md
+++ b/ldap-account-manager/README.md
@@ -7,4 +7,5 @@
 The image isn't configured with environment variables, instead it uses a volume
 for `/var/lib/ldap-account-manager` that contains the application's
 configuration files. On first run the default files are copied to the volume and
-the configuration is done through the application itself.
+the configuration is done through the application itself. The default master
+password is `lam`.
diff --git a/ldap-account-manager/entrypoint b/ldap-account-manager/entrypoint
index 3095d2067bf0e89bf3ca0d4b7a5f566d656e14a8..3b311275406ea8dd8932a165d6d54ecc06a16967 100755
--- a/ldap-account-manager/entrypoint
+++ b/ldap-account-manager/entrypoint
@@ -1,7 +1,6 @@
 #!/bin/sh
 set -eux
 
-chown root:root /var/lib/ldap-account-manager
-chmod 755 /var/lib/ldap-account-manager
+install -d -m 755 -o root -g root /var/lib/ldap-account-manager
 cp --archive --no-clobber --verbose --no-target-directory /var/lib/ldap-account-manager.orig /var/lib/ldap-account-manager
 eval exec "$@"