I've been playing with stunnel here. I put 'replica host=ldap2.xxx.zzz:636' on the master server, start stunnel on ldap2.xxx.zzz. Doing a search with '-h ldap2.xxx.zzz -p ldaps' from any machine works just fine. Adding a entry w/o ':636' to the master, works fine, it is replicated as it should. But when using ldaps, it doesn't replicate, it's just added to the master db... What might I've been missing here?