EL9 IPA servers hanging on shutdown

[Orion Poplawski]

We're seeing our EL9 IPA server VMs get stuck often at:

A stop job is running for Identity, Policy, Audit

Is anyone else seeing this?  How can I avoid it?

[Rob Crittenden]

Orion Poplawski via FreeIPA-users wrote:
> We're seeing our EL9 IPA server VMs get stuck often at:
>
> A stop job is running for Identity, Policy, Audit
>
> Is anyone else seeing this?  How can I avoid it?

Can you reproduce this by running systemctl stop ipa ?

That may show you where it is getting stuck. My guess would be Apache
and it is mod_wsgi that is hanging.

rob

[Orion Poplawski]

On 9/15/25 12:42, Rob Crittenden wrote:
> Orion Poplawski via FreeIPA-users wrote:
> > We're seeing our EL9 IPA server VMs get stuck often at:
> >
> > A stop job is running for Identity, Policy, Audit
> >
> > Is anyone else seeing this?  How can I avoid it?
>
> Can you reproduce this by running systemctl stop ipa ?
>
> That may show you where it is getting stuck. My guess would be Apache
> and it is mod_wsgi that is hanging.

Apparently we cannot reproduce it with a systemctl stop ipa.  It also may be
only happening on one of our IPA servers.

Analyzing the logs from a recent hang to only service that appears to fails to
stop is the ipa.service itself.  So I guess that points to `ipactl stop` hanging?