The Fedora Project offers a free Password Synchronization Service for Active-Directory-to-Linux password synchronization. This service is described here:
This service needs to be installed on all Domain Controllers in the environment, in a similar fashion to the Quick Connect Capture Agent.
Having the Quick Connect Capture Agent and the FreeIPA Password Synchronization Service installed on the same Domain Controller at the same time is not a recommended or supported configuration due to the incompatibility issues listed below:
As of this writing FreeIPA Password Synchronization version 1.1.6 and prior installer overwrites the registration of the Quick Connect Capture Agent (and all other agents) at this registry key:
Registration of the CaptureAgentPasswordFilter at this key is required in order for the Capture Agents to function as designed, and due to this incompatibility it renders the Capture Agents into a non-functioning state.