It looks like it was a problem with the notifier
Univention Directory Notifier ID and the locally stored version differ.
This might indicate an error or still processing transactions.
I followed all the descriptions regarding listener / notifier problems and now instead of
xxx…connection refused i get increasing counters for transactions …
watch -n 15 'univention-directory-listener-ctrl status | egrep -3 Last'