Skip to content

az login failed when using authenticated proxy #30503

@Liyun-Test

Description

@Liyun-Test

Describe the bug

Raised the ticket on behalf of customer:
The customer deployed the authenticated proxy via the guidance: https://learn.microsoft.com/en-us/azure/developer/python/sdk/azure-sdk-configure-proxy?source=recommendations&tabs=cmd

When the cx is running the command below to connect to Azure via service principal, the connectivity to Azure would fail with error.
az login --service-principal -u $client_id -p="$client_secret" --tenant $TenantId

Per the customer's local test, the issue only happens when connecting to Azure via the authenticated proxy that triggers kerberos/NTLM authentication.

If he connects to Azure via the non-auth proxy, the connectivity to Azure succeeds.

Ask: Is it supported to connect to Azure via authenticated proxy that triggers Kerberos/NTLM authentication? If yes, any idea on the error message thrown?

(In Github there is a ticket raised in 2021 with the similar issue: #16980. Not sure if the feature is supported now. )

Related command

When the cx is running the command below to connect to Azure via service principal:
az login --service-principal -u $client_id -p="$client_secret" --tenant $TenantId

Errors

Image

Issue script & Debug output

Per the customer's local test, the issue only happens when connecting to Azure via the authenticated proxy that triggers kerberos/NTLM authentication.

If he connects to Azure via the non-auth proxy, the connectivity to Azure succeeds.

Expected behavior

Connecting to Azure via the authenticated proxy that triggers kerberos/NTLM authentication is succeeded.

Environment Summary

The customer deployed the authenticated proxy via the guidance: https://learn.microsoft.com/en-us/azure/developer/python/sdk/azure-sdk-configure-proxy?source=recommendations&tabs=cmd

Additional context

No response

Metadata

Metadata

Assignees

Labels

Accountaz login/accountAuto-AssignAuto assign by botAzure CLI TeamThe command of the issue is owned by Azure CLI teamOKR CandidateThis label is used to track how many GitHub issues we have resolved for OKR purpose.Similar-Issuecustomer-reportedIssues that are reported by GitHub users external to the Azure organization.questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions