Something

MASTER:

#FIRST ACL:
access to * by dn="cn=replicator,dc=domain,dc=com" read

#index for syncrepl:
index   objectClass,entryCSN,entryUUID  eq

# replication
overlay         syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

limits dn.exact="cn=replicator,dc=domain,dc=com" size.soft=unlimited size.hard=unlimited


############################################

SLAVE:



syncrepl
    rid=1
    provider=ldaps://ldap1.domain.com:636
    binddn="cn=replicator,dc=domain,dc=com"
    bindmethod=simple
    credentials=secret
    searchbase="dc=domain,dc=com"
    filter="(objectClass=*)"
    attrs="* +"
    schemachecking=off
    scope=sub
    type=refreshAndPersist
    retry="60 +"