The move-subtree tool allows you to specify subtrees for rebalancing. You specify the source server, the target server, and one or more base DNs identifying the subtrees you want to move. You can move small subtrees using the transactional method or move large subtrees, which does not use this method. Instead, the large subtree is not fully accessible during the move, so clients may get an "insufficient access rights error" if they try to access the subtree. As entries are moved, clients can read but not write to them. Once the transfer is complete, the entries are fully available to client requests.
aci: (targetcontrol="220.127.116.11.4.1.3018.104.22.168 || 22.214.171.124.4.1.30126.96.36.199 || 188.8.131.52.4.1.30184.108.40.206") (version 3.0; acl "Allow admin to submit move-subtree controls"; allow (read) userdn="ldap:///uid=admin,dc=example,dc=com";) aci: (extop="220.127.116.11.4.1.3018.104.22.168") (version 3.0; acl "Allow admin to request move-subtree extended operation"; allow (read) userdn="ldap:///uid=admin,dc=example,dc=com";)