I've verified that ldap/ldap-dev2 has full read access into the master.
What I see is (a little edited) on the master:
ACCEPT BIND SEARCH BIND authcid="firstname.lastname@example.org" SRCH BASE="dc=stanford,dc=edu" SRCH attr="objectClass structuralObjectClass entryCSN" SEARCH RESULT tag=101 err=4 nentries=500 text=
It seems that the search is subject to the sizelimit. add sizelimit -1 (or appropriate number) to the slapd.conf of the provider.
I think we should make sure this is noted in the Admin Guide then. ;)