I am trying to synchronize group membership between eDirectory
with Active Directory on Win2k3 SP1 using Ident. Manager 2.0.1, and I
noticed that if I change the group membership of a user account using
iManager the group membership information propagates to Active Directory.
However, if I change it using ldapmodify it does not get propagated and I
get the following warning message:

Unable to synchronize reference to <Path to my group> from attribute Group

What else do I need to change using ldapmodify for the group information
to propagate? I thought groupMembership and securityEquals were enough.