On Apr 20, 2012, at 3:24 PM, Herb Burnswell wrote:

4. Run an initialization from the DS console on master B to master A.

I'm still pretty new to 389, but when learning about setting up replication agreements I remember specifically that initialization is done only one way.  The replication agreements are set up both ways if you are doing multi-master, but there is a specific sequence to the initializations.  

This probably won't solve your authorization problem on the replication manager account, but this might be a piece of your puzzle.

I was able to enable replication on a 600K-entry directory by following the documentation steps.  I had to make a special configuration to handle very large entries, but other than that, replication has been working fine for me.

Regards,
Russ.

==============================
Russell Beall
Programmer Analyst IV
Enterprise Identity Management
University of Southern California
==============================