# Ansible 2.3.1 adding 'rounds=65600' to password in /etc/shadow

**URL:** <https://forum.ansible.com/t/ansible-2-3-1-adding-rounds-65600-to-password-in-etc-shadow/24802>\
**Category:** Ansible Project\
**Created:** [June 22, 2017, 12:21pm UTC](https://forum.ansible.com/t/ansible-2-3-1-adding-rounds-65600-to-password-in-etc-shadow/24802 "2017-06-22T12:21:55Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Johannes\_Kastl](https://avatars.discourse-cdn.com/v4/letter/j/bbe5ce/32.png) [@Johannes\_Kastl](https://forum.ansible.com/u/Johannes_Kastl)\
**Post date:** [June 22, 2017, 12:21pm UTC](https://forum.ansible.com/t/ansible-2-3-1-adding-rounds-65600-to-password-in-etc-shadow/24802/1 "2017-06-22T12:21:55Z")

</div>

Hi everyone,

I just ran into a timeout when executing my unchanged playbook against  
my raspi (raspi2 with debian), that I had not run on this host since  
ansible 2.2 at least.

It seems ansible (or the python hash library or whoever) is adding a  
rounds=656000 to the password in /etc/shadow, which takes ages on the  
raspi.

# grep root /etc/shadow:  
root:$6$rounds=656000$FCZN4rw4PGVBFZY5$...

Before (without the rounds in /etc/shadow)  
#time sudo ls /  
Root-Rechte benötigt, bitte Passwort für root eingeben:  
bin boot dev etc home lib media mnt opt proc root run sbin  
selinux srv sys tmp usr var

real 0m1.783s  
user 0m0.544s  
sys 0m0.036s

After:  
time sudo ls /  
Root-Rechte benötigt, bitte Passwort für root eingeben:  
bin boot dev etc home lib media mnt opt proc root run sbin  
selinux srv sys tmp usr var

real 1m10.551s  
user 1m9.628s  
sys 0m0.064s

Is there any way to avoid this?

Here is the snippet from the role:

- name: "set password for root"  
&nbsp;&nbsp;user:  
&nbsp;&nbsp;&nbsp;&nbsp;name: "root"  
&nbsp;&nbsp;&nbsp;&nbsp;password: "{{ ansible\_become\_pass | password\_hash('sha512',  
salt\_for\_password | default('') ) }}"  
&nbsp;&nbsp;&nbsp;&nbsp;update\_password: "always"

Thanks in advance,  
Johannes