What can be the reason why SSH connection is not possible when using Azure cloud shell to the VM that can be SSH connected from the command line of the local PC?

Question

What can be the reason why SSH connection is not possible when using Azure cloud shell to the VM that can be SSH connected from the command line of the local PC?

あまね 0

the access point is Azure VM "A".

There are two connection sources, one (local PC command line) can be SSH connected. The other (Azure cloud shell) gives an error.
Error is "Permission denied (publickey)."

VM"A" has "authorized_keys" in "/.ssh" .
chmod is 744 this file.

deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-06-27T19:56:14.8266667+00:00

@あまね

If you still have questions, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts.

If the answer has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!

1 answer

Your answer

deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-06-27T19:56:14.8266667+00:00

@あまね

If you still have questions, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts.

If the answer has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!

Answer 1

deherman-MSFT 38,021 Microsoft Employee Moderator

@あまね

I tested this out and I was able to SSH from Azure Cloud Shell bash environment to my Ubuntu VM using the pem file. Your permissions of 744 are too permissive on the .pem file, change to 700 and it should work.

Please try and let me know the results.

If you still have questions, please let us know in the "comments" and we would be happy to help you. Comment is the fastest way of notifying the experts.

If the answer has been helpful, we appreciate hearing from you and would love to help others who may have the same question. Accepting answers helps increase visibility of this question for other members of the Microsoft Q&A community.

Thank you for helping to improve Microsoft Q&A!

User's image

あまね 0 Reputation points

2023-06-16T00:21:11.1966667+00:00

Thank you answers.I need more help.
There is .pem file in a directory on My local PC.

I haven't checked the permissions on this file.

I checked the public key file to be placed on the Azure VM side.

I would like to know the details of the requirements for making an ssh connection to an Azure VM with the azure cloud shell.

①Is it possible that the private key on the local PC side is not accessible when Azure Cloud Shell ssh connects?

There are the following cautions for ssh connection.※Some IPs and host names are processed.

　$ ssh -vi \Users\USER\Documents\Azure_learn\AzureVM\XXXX.pem ******@XXXX.XXXX.XXXX.XXXX

Warning: Identity file UsersUSERDocumentsAzure_learnAzureVMXXXX.pem not accessible: No such file or directory.

debug1: load_hostkeys: fopen /home/XXXX/.ssh/known_hosts2: No such file or directory

debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts: No such file or directory

debug1: load_hostkeys: fopen /etc/ssh/ssh_known_hosts2: No such file or directory

②As a major premise, SSH connection to this VM is possible from the command line of the local PC.

In other words, is it correct that there is no problem with the registration status of the public key on the VM side?

③In this situation, could it also be a problem with the .pem file permissions on the local file?

My local PC is Windows.
あまね 0 Reputation points

2023-06-16T00:51:01.1466667+00:00

Information for each component is listed below.

・Server VM(Azure VM) has "authorized_keys" made for AzureVM when making Aure Portal in /home/XXXX/.ssh

・Server VM(Azure VM) has rw-r--r-- 1 permission set "authorized_keys" .

・Rocal PC has private keys in C:\Users\USER\Documents\Azure_learn\AzureVM

・Rocal PC is windows.Command prompt is C:\Users\USER>

・Azure cloud shell, When executing the following command in Azure cloud shell, the location of the private key cannot be accessed.

XXXXX [ ~ ]$ ls \Users\USER\Documents\Azure_learn\AzureVM

ls: cannot access 'UsersUSERDocumentsAzure_learnAzureVM': No such file or directory
deherman-MSFT 38,021 Reputation points Microsoft Employee Moderator

2023-06-22T17:52:32.2766667+00:00

@あまね

If you are trying to SSH from Cloudshell then the pem key needs to be uploaded there in order for it to be usable.
あまね 0 Reputation points

2023-07-01T23:39:44.67+00:00

@deherman-MSFT

uploaded and tried ssh.
It's warning.

XXXX [ ~ ]$ ssh -i /home/XXXX/XXX.pem ******@XXX.XXX.XXX.XXX

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

@ WARNING: UNPROTECTED PRIVATE KEY FILE! @

@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@

Permissions 0644 for '/home/XXXX/XXX.pem' are too open.

It is required that your private key files are NOT accessible by others.

This private key will be ignored.

Load key "/home/XXXX/XXX.pem": bad permissions

******@XXX.XXX.XXX.XXX: Permission denied (publickey).

Share via

What can be the reason why SSH connection is not possible when using Azure cloud shell to the VM that can be SSH connected from the command line of the local PC?

1 answer

Your answer