You can use ldaps:// and starttls in a syncrepl definition. For starttls, use [starttls=yes|critical] inside the syncrepl definition. The use of starttls was not included in the documentation though. I'll update the admin guide and man page to include this. - Jong-Hyuk