Well, we'd need to see the config file for the replica as well. --QuanahWas in a previous post, but here you go.
Looks ok to me. Did you set your replica up to fully resynch after making the acl changes on the master and restarting slapd on it (the master)?
--Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration