It seems there are updates for that group coming from rid 002 (egeria.ldap.cpp.edu) and 003 (minerva.ldap.cpp.edu), but none from rid 001 (themis.ldap.cpp.edu) which is serverid 4, where the change was actually made?
Oh, I thought you had said you only had two masters. This could well be ITS#8444 (ignore the ITS title, it has nothing to do with memberOf), where there are out of sync problems with 3+ MMR nodes and delta-syncrepl when syncprov checkpoints.
--Quanah -- Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: <http://www.symas.com>