Try as you might - you won't be syncing passwords without this password filter installed on your AD DCs.

This is an Active Directory password filter that stores the hex-encoded sha1 hash of the users password in a given LDAP attribute (right now the division attribute). You then nominate this attribute in your GADS configuration file.