Here is a log snippet from mm-server2:
This clearly shows that access to userPassword was denied by your ACLs on MMR2. Clearly there is some difference in the ACLs stored in cn=config between MMR1 and MMR2.
--Quanah -- Quanah Gibson-Mount Architect - Server Zimbra, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration