Skip to content

Commit 5641434

Browse files
[Doc-a-Thon] Updating Azure AD and OpenSSH
-Adding a known issue with az ssh to linux Red Hat 7.X VM - Fixing a typo with yum erase. must be yum remove.
1 parent 76788de commit 5641434

File tree

1 file changed

+23
-2
lines changed

1 file changed

+23
-2
lines changed

articles/active-directory/devices/howto-vm-sign-in-azure-ad-linux.md

Lines changed: 23 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -450,10 +450,10 @@ To uninstall old packages:
450450
451451
1. Log in as a local user with admin privileges.
452452
1. Make sure there are no logged-in Azure AD users. Call the `who -u` command to see who is logged in. Then use `sudo kill <pid>` for all session processes that the previous command reported.
453-
1. Run `sudo apt remove --purge aadlogin` (Ubuntu/Debian), `sudo yum erase aadlogin` (RHEL or CentOS), or `sudo zypper remove aadlogin` (openSUSE or SLES).
453+
1. Run `sudo apt remove --purge aadlogin` (Ubuntu/Debian), `sudo yum remove aadlogin` (RHEL or CentOS), or `sudo zypper remove aadlogin` (openSUSE or SLES).
454454
1. If the command fails, try the low-level tools with scripts disabled:
455455
1. For Ubuntu/Debian, run `sudo dpkg --purge aadlogin`. If it's still failing because of the script, delete the `/var/lib/dpkg/info/aadlogin.prerm` file and try again.
456-
1. For everything else, run `rpm -e noscripts aadogin`.
456+
1. For everything else, run `rpm -e --noscripts aadogin`.
457457
1. Repeat steps 3-4 for package `aadlogin-selinux`.
458458
459459
### Extension installation errors
@@ -511,6 +511,27 @@ One solution is to remove `AllowGroups` and `DenyGroups` statements from *sshd_c
511511
512512
Another solution is to move `AllowGroups` and `DenyGroups` to a `match user` section in *sshd_config*. Make sure the match template excludes Azure AD users.
513513
514+
### Getting Permission Denied when trying to connect from Azure Shell to Linux Red Hat/Oracle/Centos 7.X VM.
515+
516+
The OpenSSH server version in the target VM 7.4 is too old. Version incompatible with OpenSSH client version 8.8. Refer to [RSA SHA256 certificates no longer work](https://bugzilla.mindrot.org/show_bug.cgi?id=3351) for more information.
517+
518+
Workaround:
519+
520+
- Adding option `"PubkeyAcceptedKeyTypes= [email protected]"` in the `az ssh vm ` command.
521+
522+
```azurecli-interactive
523+
az ssh vm -n myVM -g MyResourceGroup -- -A -o "PubkeyAcceptedKeyTypes= [email protected]"
524+
```
525+
- Adding the option `"PubkeyAcceptedKeyTypes= [email protected]"` in the `/home/<user>/.ssh/config file`.
526+
527+
528+
Add the `"PubkeyAcceptedKeyTypes [email protected]"` into the client config file.
529+
530+
```config
531+
Host *
532+
PubkeyAcceptedKeyTypes [email protected]
533+
```
534+
514535
## Next steps
515536

516537
- [What is a device identity?](overview.md)

0 commit comments

Comments
 (0)