Master-Slave Replicaton with attribute-selection

When trying to replicate entries from master-ds to slave-ds the attribute-selecton is not working properly.

We want to replicate the user-entries with some selected attributes only (objectClass, cn, ou, sn):

ads-replattributes: objectClass
ads-replattributes: cn
ads-replattributes: ou
ads-replattributes: sn

Initial replicaton works fine. All user-entries with the selected attributes are replicated.

But now if you change only one attribute for one entry on the master-ds, all attributes are replicated (cn, ou, sn, o, l, fax, mobile, userPassword, objectClass ...).

We are using M21 and Java8.
We tried it on Win10 and W2008R2.
We tried with "Refresh only" and "Refresh and persist".

Our procedure:

1 ) On the master-side we only changed the attribte ads-replEnabled to TRUE.

2) On the slave-side, this is our simple customer-entry for testing:

dn: ads-replconsumerid=consumer1,ou=replConsumers,ads-serverid=ldapServer,ou
=servers,ads-directoryServiceId=default,ou=config
objectclass: ads-base
objectclass: ads-replConsumer
objectclass: top
ads-replaliasderefmode: never
ads-replattributes: cn
ads-replattributes: objectClass
ads-replattributes: ou
ads-replattributes: sn
ads-replconsumerid: consumer1
ads-replprovhostname: localhost
ads-replprovport: 389
ads-replrefreshinterval: 60000
ads-replrefreshnpersist: TRUE
ads-replsearchfilter: (objectClass=*)
ads-replsearchscope: sub
ads-replsearchsizelimit: 0
ads-replsearchtimeout: 0
ads-repluserdn: uid=admin,ou=system
ads-repluserpassword:: c2VjcmV0
ads-searchbasedn: dc=example,dc=com
ads-enabled: TRUE
ads-replstrictcertvalidation: FALSE
ads-replusetls: FALSE
description: local