I am experiencing some really strange behavior with nway multimaster. Does anyone know why this would be happening?

I have 2 boxes set up to sync, called rsa01, rsa02

If I create ‘ou=groups,dc=comcast,dc=com’ on rsa02, it will create it on rsa01
If I create ‘cn=test,ou=groups,dc=comcast,dc=com’ on rsa02 it will NOT create on rsa01
If I delete ‘ou=groups,dc=comcast,dc=com’ on rsa02, it will delete on rsa01
If I create anything on rsa01, it will NOT create on rsa02

I have the sync set up for ‘searchBase’ set to dc=comcast,dc=com.   

Here is the olcSyncrepl configuration (for both boxes):
dn: olcDatabase={1}bdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcbdbConfig
olcDatabase: {1}bdb
olcSuffix: dc=comcast,dc=com
olcDbDirectory: /usr/var/openldap-data/
olcRootDN: cn=Manager,dc=comcast,dc=com
olcRootPW: {SSHA}kJTEcfOmPf7fKv71AtxDjlUZNPqN9pIT
olcLimits: dn.exact="cn=Manager,dc=comcast,dc=com" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited
olcSyncRepl: rid=004 provider=ldap://10.252.152.76 binddn="cn=Manager,dc=comcast,dc=com" bindmethod=simple
  credentials="test" searchbase="dc=comcast,dc=com" type=refreshOnly
  interval=00:00:00:10 retry="5 5 300 5" timeout=1
olcSyncRepl: rid=005 provider=ldap://10.252.152.77 binddn="cn=Manager,dc=comcast,dc=com" bindmethod=simple
  credentials="test" searchbase="dc=comcast,dc=com" type=refreshOnly
  interval=00:00:00:10 retry="5 5 300 5" timeout=1
olcMirrorMode: TRUE

dn: olcOverlay=syncprov,olcDatabase={1}bdb,cn=config
changetype: add
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: syncprov

--
MAT