Paul B. Henson wrote:
But it would be a lot simpler if you could load the password policy module and have it not actually try to replicate anything until it's actually configured with a policy.
AFAICS nothing prevents you from loading the schema first on all replicas. And after that load the overlay.
Ciao, Michael.