nsrole not generated for amadmin (am 7 sp 3)

in my am env, I have 2 ldaps with multi-master configured. Both ldap are masters.

I install am pointing to master 1 and replicate data over to master 2. Run the 2 ldif files come with the am install to add am attr and objectclass into master 2.

However, when I look at the amadmin, on master 1, the nsrole shows up but not master 2 while nsroledn shows on both ldap (see the ldif at the end). And that makes the console display info incorrectly.

I try a db2ldif to get a copy of the am suffix but can't find the cos definition and cos template for the top-level admin role.How is the the am related cos info stored in ldap, how could we get the am related cos definition and template from ldap from admin console or by running ldapsearch command?

Would appreciate if any can shed some light on why this happens, what to verify and how to fix it?

Thanks,

(master 1)

dn: uid=amAdmin,ou=People,o=amroot

nsrole: cn=containerdefaulttemplaterole,o=amroot

nsrole: cn=top-level admin role,o=amroot

nsroledn: cn=Top-level Admin Role,o=amroot

(master 2)

dn: uid=amAdmin,ou=People,o=amroot

nsroledn: cn=Top-level Admin Role,o=amroot

[1208 byte] By [612158a] at [2007-11-27 4:55:10]
# 1
nsrole is a Sun LDAP calculated field. Make sure your mulitmaster replication is working correctly. Reinitialize master2 from master1.
Aaron_Andersona at 2007-7-12 10:10:02 > top of Java-index,Web & Directory Servers,Directory Servers...