[Issue 10385] syncprov should use accesslog's rootDN when reading it