syncrepl only works as rootdn