I have the following structure AD RWDC(Read Write), AD RODC(Read Only), and a 389 DS instance.

PassSync will be installed on the AD RODC and the 389 DS instance will sync with it.

If the users are created on the AD RWDC and synced with the RODC, can PassSync still intercept passwords in cleartext format, and push them to 389 DS?