# 2.0 host key check issues

**URL:** <https://forum.ansible.com/t/2-0-host-key-check-issues/19755>\
**Category:** Ansible Project\
**Created:** [November 13, 2015, 1:05am UTC](https://forum.ansible.com/t/2-0-host-key-check-issues/19755 "2015-11-13T01:05:41Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Guy\_Knights](https://avatars.discourse-cdn.com/v4/letter/g/db5fbb/32.png) [@Guy\_Knights](https://forum.ansible.com/u/Guy_Knights)\
**Post date:** [November 13, 2015, 1:05am UTC](https://forum.ansible.com/t/2-0-host-key-check-issues/19755/1 "2015-11-13T01:05:41Z")

</div>

I’ve noticed since I upgraded to 2.0 that something is wrong with host key checks when running ansible-playbook. Previously, under 1.9, if ansible-playbook encountered an unknown host key during the setup phase, it was present the standard OpenSSH host key prompt and pause to wait for user input. However, since 2.0 it now seems to continue with the next host even without any user input. This seems to cause issues as the run progresses and either causes the run to hang, or it just fails for the hosts with unknown keys. I have seen it wait at the prompt properly from time to time, but mostly I see the behaviour I just described.

Has anyone else noticed this issue?

---

<div class="post-metadata">

**Author:** ![Alex\_Leonhardt](https://avatars.discourse-cdn.com/v4/letter/a/ec9cab/32.png) [@Alex\_Leonhardt](https://forum.ansible.com/u/Alex_Leonhardt)\
**Post date:** [November 13, 2015, 6:49am UTC](https://forum.ansible.com/t/2-0-host-key-check-issues/19755/2 "2015-11-13T06:49:53Z")

</div>

I’d try running 1.9 against the very same host and see what happens, also, adding -vvvv may give some idea what’s happening too … it may just be a new config setting somewhere … this may be relevant too tho : [https://github.com/ansible/ansible/issues/3694#issuecomment-22530734](https://github.com/ansible/ansible/issues/3694#issuecomment-22530734)

Alex

---

<div class="post-metadata">

**Author:** ![Brian\_Coca](https://avatars.discourse-cdn.com/v4/letter/b/6de8d8/32.png) [@Brian\_Coca](https://forum.ansible.com/u/Brian_Coca)\
**Post date:** [November 13, 2015, 6:57am UTC](https://forum.ansible.com/t/2-0-host-key-check-issues/19755/3 "2015-11-13T06:57:35Z")

</div>

2.0 does not lock known\_hosts for updating ssh keys, 1.9 does, it is a  
difficult issue as it needs to be locked to be consistent, but can end  
up serializing the plays.
