[Issue 10385] New: syncprov should use accesslog's rootDN when reading it