Harry G. Coin via FreeIPA-users wrote:
For the last few months, shutdown/poweroff of freeipa server systems hangs until systemd forcibly terminates freeipa. During that time I see ns-slapd at nearly full CPU consumption. I see log entries such as:
ipa-dnskeysyncd[1578]: ipaserver.dnssec.syncrepl
even though there are no domains with dnssec active (though it is installed).
Upon restart, freeipa complains of 'unclean shutdown' or similar, every time.
Is anyone else seeing this? Is there an answer to this?
Does this also happen if you run ipactl stop?
If so you could attach gdb to ns-slapd and get a stack trace for further investigation.
rob