All directory servers receive updated on-demand password synchronization configuration
The plugins must be re-enabled in this order:
Failover installation's preferred master.
Failover installation's secondary master.
All other masters.
All read-only replicas.
The order in which the Directory Server Plugins are enabled is important. If they are enabled in the wrong order, on-demand synchronization requests could loop between two masters, tying up all Directory Server connections.
When re-enabling the plugins, make sure to specify the configuration directory of the failover installation, for example, config-eu.gt.com
This reinstallation procedure can be automated by doing more work ahead of time:
Install the Directory Server Plugins for the Failover configuration.
Export the plugins' configuration for each master from the cn=pswsync,cn=plugins,cn=config tree and it includes two entries.
Re-enable the Directory Server Plugins for the Primary configuration.
Delete the cn=pswsync,cn=plugins,cn=config tree.
Add the failover installation entries using ldapmodify.
Restart the directory server.