https://bugs.openldap.org/show_bug.cgi?id=10052
--- Comment #1 from w3eagle@yahoo.com --- Just to be clear, when we use nginx with ldaps to upper Ad server, but terminate TLS on nginx, and use port 389 to talk to nodes that does the ldapsearch like below, there was no errors. searches are good 100%, instead of about 1% can't contact LDAP errors.
ldapsearch -H ldap://nginxbox \ -x -D "CN=??????" \ -y pssd.txt -LLL \ -b "OU=???????" "(sAMAccountName=????)" dn
Above has not failure at all when over nginx reverse proxy