[SOLVED] Accounts don't sync (2 Servers)

[inaut]

Hello

Zimbra Version: 6.0.12 OSS

I've a Problem with my 2 Zimbra Servers (Replication)
1 have two Zimbra Servers and two Domains
One is LDAP Master the other is Slave

Everything was working since July 2010

But now i have a Problem:
If I create a new Account on Server 2 i can see the Account on Server 1 but not on Server 2.
But if i change an account (e.g. Contact Information) on one Server i can see the changes on the other. It works in every direction.
Only new Accounts are not visible on Server 2.

I tried to create new Certificates, but this did not help.
On Server 1 I see this in zimbra.log

Apr  9 22:44:28 server1 slapd[2188]: slap_queue_csn: queing 0x4185e340 20110409204428.087896Z#000000#000#000000
Apr  9 22:44:28 server1 slapd[2188]: slap_graduate_commit_csn: removing 0x6f2a2a0 20110409204428.087896Z#000000#000#000000
Apr  9 22:44:28 server1 slapd[2188]: slap_queue_csn: queing 0x39b1810 20110409204428.087896Z#000000#000#000000
Apr  9 22:44:28 server1 slapd[2188]: slap_graduate_commit_csn: removing 0x8838240 20110409204428.087896Z#000000#000#000000

zimbra.log Server 2

Apr 10 04:49:57 server2 slapd[8835]: slap_client_connect: URI=ldap://XXXXXXXXXX:389 Error, ldap_start_tls failed (-11) 
Apr 10 04:49:57 server2 slapd[8835]: do_syncrepl: rid=100 rc -11 retrying

Server 1 is in Austria, Server 2 is in China - this is the reason for the time difference.

The LDAP Passwords are the same on both Servers.
If i try to connect with ldapsearch..... i have to enter the LDAP Password and it works.

Now i have really no idea...
So i hope someone can help me...
Thanks!

[Fox_sibirsky]

Look here
Ubunutu 8.04x64 6.10 -> 7.01 Multiserver

.... Aftrer upgrade replication between ldap wasn't work. I copied ca.key and ca.pem from ldap-master to slave, then ran on slave:

"zimbra@host:$ ln -f -s ca.pem /opt/zimbra/conf/ca/`openssl x509 -hash -noout -in /opt/zimbra/conf/ca/ca.pem`.0"

[inaut]

Thank's!
Now it's working again...