[Freeipa-users] shutdown/poweroff freeipa hang if replication exists?

For the last few months, shutdown/poweroff of freeipa server systems hangs until systemd forcibly terminates freeipa.  During that time I see ns-slapd at nearly full CPU consumption.  I see log entries such as:

ipa-dnskeysyncd[1578]: ipaserver.dnssec.syncrepl

even though there are no domains with dnssec active (though it is installed).

Upon restart, freeipa complains of 'unclean shutdown' or similar, every time.

Is anyone else seeing this?  Is there an answer to this?

Thanks

Harry Coin