Skip to content

Does not mention key windows restriction: https://learn.microsoft.com/en-us/cli/azure/ssh?view=azure-cli-latest#az-ssh-vm #26582

Open

Description

Describe the bug

This command (done in Azure CloudShell in this case):
az ssh vm --resource-group myresourcegroup --vm-name myvmconsolename

Generates this error:
SSH Login using AAD credentials is not currently supported for Windows.

However, this important limitation is not mentioned in the documentation at az ssh: az ssh vm

It also seems implied that openssh must be installed on windows, but it is not clear whether it needs to be started or whether the azure client will simply call it (which reduces the attack surface if starting it is not needed).

Related command

az ssh vm --resource-group myresourcegroup --vm-name myvmconsolename

Errors

SSH Login using AAD credentials is not currently supported for Windows.

Issue script & Debug output

SSH Login using AAD credentials is not currently supported for Windows.

Expected behavior

Documentation should note this limitation.
Since Windows does not have SSH preinstalled, documentation should also list server side requirements - which should be less than the requirements for using ssh directly, which are:

  1. Install SSH
  2. Start SSH (and configure startup)
  3. Open port 22 on local firewall.

Environment Summary

azure-cli 2.49.0

core 2.49.0
telemetry 1.0.8

Extensions:
ai-examples 0.2.5
ml 2.17.2
ssh 1.1.6

Dependencies:
msal 1.20.0
azure-mgmt-resource 22.0.0

Python location '/usr/bin/python3.9'
Extensions directory '/home/darwin/.azure/cliextensions'
Extensions system directory '/usr/lib/python3.9/site-packages/azure-cli-extensions'

Python (Linux) 3.9.14 (main, Feb 8 2023, 03:39:52)
[GCC 11.2.0]

Additional context

No response

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

Labels

AADAuto-AssignAuto assign by botSSHService AttentionThis issue is responsible by Azure service team.VM SSHbugThis issue requires a change to an existing behavior in the product in order to be resolved.customer-reportedIssues that are reported by GitHub users external to the Azure organization.

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions