syncrepl rid=1
   provider=ldap://ldap1.my.org:389
   type=refreshAndPersist
   retry="60 +"
   searchbase="o=my.org,c=us"
   filter="(objectClass=*)"
   scope=sub
   attrs="*,+"
   schemachecking=off
   bindmethod=simple
   binddn="cn=syncuser,o=my.org,c=us"
   credentials=syncpass
                                                                                
 updateref ldap://ldap1.my.org

provider= is the server this consumer will query

type=refreshAndPersist means that after the initial query/sync the query should continue indefinitely which will mean that any new changes will be picked up instantly.
retry="60 +" means if the connection to the provider is lost, try connecting again after 60 seconds, and do so indefinitely until a connection is established.

searchbase= obviously this should start at the root of the tree

filter="(objectClass=*)" means that the search should look for everything

scope=sub means that it should search recursively

attrs="*,+" will copy all attributes, including operational attributes. (This is the default setting, so it's not necessary to specify it.)

schemachecking=off this is safe assuming that the provider is doing this allready

binddn= is the user 'on the provider' who the client will use for it's queries bindmethod=simple use plaintext passwords credentials=syncpass is the password to use for syncuser

updateref ldap://ldap1.my.org this is used by well written clients to tell them the right place for changes.
jsaint-rossy@associates.usss.treas.gov, quanah@openldap.org, hyc@openldap.org

 slapd[15190]: <= bdb_equality_candidates: (entryUUID) index_param failed (18)

 index   entryUUID  eq

 limits dn.exact="cn=syncuser,o=my.org,c=us" size=unlimited time=unlimited