diff --git a/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/31modules b/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/31modules
index d798f69344..0644ae7cf2 100644
--- a/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/31modules
+++ b/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/31modules
@@ -18,3 +18,4 @@ if configRegistry.is_true('ldap/shadowbind', True):
 @!@
 moduleload	constraint.so
 moduleload	accesslog.so
+moduleload	refint.so
diff --git a/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/40univention-ldap-server_database b/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/40univention-ldap-server_database
index ec8c8d7e32..d9a14c2efc 100644
--- a/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/40univention-ldap-server_database
+++ b/management/univention-ldap/conffiles/etc/ldap/slapd.conf.d/40univention-ldap-server_database
@@ -117,3 +117,6 @@ add_content_acl on
 overlay constraint
 constraint_attribute uidNumber regex ^[^0]+[0-9]*$
 constraint_attribute gidNumber regex ^[^0]+[0-9]*$
+
+overlay refint
+refint_attributes secretary