diff --git a/utils/ldapcertfs.py b/utils/ldapcertfs.py
index 930d1fb8..dc218fae 100755
--- a/utils/ldapcertfs.py
+++ b/utils/ldapcertfs.py
@@ -167,7 +167,7 @@ class LdapCertFS(fuse.Fuse):
             'csr.pem' : {'file':['csr'], 'mode':0444},
             'chain.pem' : {'file':['chain'], 'mode':0444},
             'key_cert_chain.pem' : {'file':['privatekey', 'certificat', 'chain'], 'mode':0400},
-            'cert_chain.pem' : {'file':['certificat', 'chain'], 'mode':0400},
+            'cert_chain.pem' : {'file':['certificat', 'chain'], 'mode':0444},
         }
         self.conn = lc_ldap.shortcuts.lc_ldap_readonly()
         self._storage = {}
@@ -190,7 +190,7 @@ class LdapCertFS(fuse.Fuse):
                     self.conn = lc_ldap.shortcuts.lc_ldap_readonly()
                     if not rec:
                         logger.warning("[ldapcertfs] ldap down, retrying")
-                        kwargs['rec'] = rec
+                        kwargs['rec'] = True
                         self.func_cache(func, *args, **kwargs)
                 except Exception as e:
                     logger.error("[ldapcertfs] uncaught exception %r" % e)