`az network bastion ssh (...) --auth-type password` uses public key authentication on localhost

[FlorentATo]

Describe the bug

I'm trying to connect to a Linux VM deployed behind Azure Bastion using az network bastion ssh. For the purpose of this test, sshd is configured to accept password-based authentication for SSH.

When running az network bastion ssh --name <bastion-name> --resource-group <rg-name> --target-resource-id <vm-resource-id> --auth-type password --username <my-username>, it appears that the Azure CLI tries to connect on the local (tunnel) port using public Key authentication instead of password authentication.

Note: I don't have any entry for "localhost" in my .ssh/config.

Related command

az network bastion ssh

Errors

➜  ~ az network bastion ssh --name {REDACTED} --resource-group {REDACTED} --target-resource-id {REDACTED} --auth-type password --username ftatard
/Users/florenttatard/.azure/cliextensions/bastion/azext_bastion/custom.py:107: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
  from pkg_resources import parse_version
ftatard@localhost: Permission denied (publickey).

Issue script & Debug output

➜  ~ az network bastion ssh --name {REDACTED} --resource-group {REDACTED} --target-resource-id {REDACTED} --auth-type password --username ftatard --debug
cli.knack.cli: Command arguments: ['network', 'bastion', 'ssh', '--name', '{REDACTED}', '--resource-group', '{REDACTED}', '--target-resource-id', '/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Compute/virtualMachines/vm-client-data-access-prod', '--auth-type', 'password', '--username', 'ftatard', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x105288a40>, <function OutputProducer.on_global_arguments at 0x1054d6c00>, <function CLIQuery.on_global_arguments at 0x105518fe0>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'network': ['azure.cli.command_modules.network', 'azure.cli.command_modules.privatedns', 'azext_bastion']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: network                   0.161       122       370
cli.azure.cli.core: privatedns                0.004        14        60
cli.azure.cli.core: Total (2)                 0.165       136       430
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: bastion                   0.002         2         9  /Users/{REDACTED}/.azure/cliextensions/bastion
cli.azure.cli.core: Total (1)                 0.002         2         9
cli.azure.cli.core: Loaded 136 groups, 439 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command  : network bastion ssh
cli.azure.cli.core: Command table: network bastion ssh
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x10699b100>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/Users/{REDACTED}/.azure/commands/2026-02-11.13-49-56.network_bastion_ssh.47320.log'.
az_command_data_logger: command args: network bastion ssh --name {} --resource-group {} --target-resource-id {} --auth-type {} --username {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x1069e0b80>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x1069e2e80>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x1069e3060>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x1069e3100>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x1054d6ca0>, <function CLIQuery.handle_query_parameter at 0x105519080>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x1069e2f20>]
az_command_data_logger: extension name: bastion
az_command_data_logger: extension version: 1.4.2
/Users/{REDACTED}/.azure/cliextensions/bastion/azext_bastion/custom.py:107: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
  from pkg_resources import parse_version
cli.azure.cli.core.auth.persistence: build_persistence: location='/Users/{REDACTED}/.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /Users/ftatard/.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d
msal.authority: {REDACTED}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: adf452c6-cb41-4f86-84b4-0cd040903cd0
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}?api-version=2024-01-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies:     'Accept': 'application/json'
cli.azure.cli.core.sdk.policies:     'x-ms-client-request-id': '75350fae-077a-11f1-98e5-ce6dc8c0c4fb'
cli.azure.cli.core.sdk.policies:     'CommandName': 'network bastion ssh'
cli.azure.cli.core.sdk.policies:     'ParameterSetName': '--name --resource-group --target-resource-id --auth-type --username --debug'
cli.azure.cli.core.sdk.policies:     'User-Agent': 'AZURECLI/2.83.0 (HOMEBREW) azsdk-python-core/1.38.0 Python/3.13.12 (macOS-15.6-arm64-arm-64bit-Mach-O)'
cli.azure.cli.core.sdk.policies:     'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}?api-version=2024-01-01 HTTP/1.1" 200 1677
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies:     'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Content-Length': '1677'
cli.azure.cli.core.sdk.policies:     'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies:     'Expires': '-1'
cli.azure.cli.core.sdk.policies:     'ETag': 'W/"cb561851-214d-4548-9508-581e6c8c8bd3"'
cli.azure.cli.core.sdk.policies:     'x-ms-request-id': '127fdbbb-b6fe-4ed0-b5cf-06f5e9c49e9a'
cli.azure.cli.core.sdk.policies:     'x-ms-correlation-request-id': '5b83d40f-a1aa-4895-b6d7-4e7ae11a10e0'
cli.azure.cli.core.sdk.policies:     'x-ms-arm-service-request-id': '8b80963c-d838-4c60-90fb-a36803a438c8'
cli.azure.cli.core.sdk.policies:     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies:     'x-ms-routing-request-id': 'CANADACENTRAL:20260211T184956Z:5b83d40f-a1aa-4895-b6d7-4e7ae11a10e0'
cli.azure.cli.core.sdk.policies:     'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies:     'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies:     'X-MSEdge-Ref': 'Ref A: F2B2F8881CDA4122BBD604CE73A5EB1E Ref B: YQ1AA2090602052 Ref C: 2026-02-11T18:49:56Z'
cli.azure.cli.core.sdk.policies:     'Date': 'Wed, 11 Feb 2026 18:49:55 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"name":"{REDACTED}","id":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}","etag":"W/\"cb561851-214d-4548-9508-581e6c8c8bd3\"","type":"Microsoft.Network/bastionHosts","location":"canadacentral","tags":{"billing_scope":"global","managed_by":"scalr.io","scalr_workspace":"vm-client-data-access-production"},"properties":{"provisioningState":"Succeeded","dnsName":"bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com","scaleUnits":2,"enableTunneling":true,"publicUri":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/publicIPAddresses/pip-{REDACTED}","ipConfigurations":[{"name":"config","id":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}/bastionHostIpConfigurations/config","etag":"W/\"cb561851-214d-4548-9508-581e6c8c8bd3\"","type":"Microsoft.Network/bastionHosts/bastionHostIpConfigurations","properties":{"provisioningState":"Succeeded","privateIPAllocationMethod":"Dynamic","publicIPAddress":{"id":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/publicIPAddresses/pip-{REDACTED}"},"subnet":{"id":"/subscriptions/{REDACTED}/resourceGroups/rg-global-prod/providers/Microsoft.Network/virtualNetworks/vnet-global-prod/subnets/AzureBastionSubnet"}}}]},"sku":{"name":"Standard"}}
cli.azext_bastion.tunnel: Creating a socket on port: 0
cli.azext_bastion.tunnel: Setting socket options
cli.azext_bastion.tunnel: Binding to socket on local address and port
cli.azext_bastion.tunnel: Auto-selecting port: 62629
cli.azext_bastion.tunnel: Finished initialization
cli.azext_bastion.custom: Running ssh command /usr/bin/ssh ftatard@localhost -p 62629 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=Error
cli.azext_bastion.tunnel: Got a connection, starting a new thread
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d
msal.authority: openid_config("https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic', 'self_signed_tls_client_auth'], 'jwks_uri': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/kerberos', 'mtls_endpoint_aliases': {'token_endpoint': 'https://mtlsauth.microsoft.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/token'}, 'tls_client_certificate_bound_access_tokens': True, 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: abad4cd6-c171-4384-9098-61a41aa689df
cli.azext_bastion.tunnel: Content: {'resourceId': '/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Compute/virtualMachines/vm-client-data-access-prod', 'protocol': 'tcptunnel', 'workloadHostPort': 22, 'aztoken': '{REDACTED}', 'token': None}
urllib3.connectionpool: Starting new HTTPS connection (1): bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443
urllib3.connectionpool: https://bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443 "POST /api/tokens HTTP/1.1" 200 None
cli.azext_bastion.tunnel: Websocket, connected status: True
cli.azext_bastion.tunnel: Got debugger connection... index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Both debugger and websocket threads started...
cli.azext_bastion.tunnel: Successfully connected to local server..
cli.azext_bastion.tunnel: Received debugger data, nbytes: 21, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 1568, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 80, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 84, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 52, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 68, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 148, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 148, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
ftatard@localhost: Permission denied (publickey).
cli.azext_bastion.tunnel: Received debugger data, nbytes: 0, index: 0
cli.azext_bastion.tunnel: Client close, index: 0
cli.azext_bastion.tunnel: Client disconnected 0
cli.azext_bastion.tunnel: Cleaning up session
urllib3.connectionpool: Starting new HTTPS connection (1): bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Websocket close, index: 0
cli.azext_bastion.tunnel: Client disconnected!, index: 0
cli.azext_bastion.tunnel: Cleaning up session
urllib3.connectionpool: Starting new HTTPS connection (1): bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443
urllib3.connectionpool: https://bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443 "DELETE /api/tokens/{REDACTED} HTTP/1.1" 204 0
cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x1069e04a0>, <function _x509_from_base64_to_hex_transform at 0x1069e0540>]
cli.knack.cli: Event: CommandInvoker.OnFilterResult []
cli.knack.cli: Event: Cli.SuccessfulExecute []
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x10699b380>]
az_command_data_logger: exit code: 0
cli.__main__: Command ran in 0.965 seconds (init: 0.063, invoke: 0.902)
urllib3.connectionpool: https://bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443 "DELETE /api/tokens/{REDACTED} HTTP/1.1" 404 None
cli.azext_bastion.tunnel: Session already deleted
cli.azext_bastion.tunnel: Both debugger and websocket threads stopped...
cli.azext_bastion.tunnel: Stopped local server..
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4182 in cache file under /Users/ftatard/.azure/telemetry/20260211134956825
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/homebrew/Cellar/azure-cli/2.83.0/libexec/bin/python /opt/homebrew/Cellar/azure-cli/2.83.0/libexec/lib/python3.13/site-packages/azure/cli/telemetry/__init__.py /Users/ftatard/.azure /Users/ftatard/.azure/telemetry/20260211134956825"
telemetry.process: Return from creating process 47327
telemetry.main: Finish creating telemetry upload process.

Expected behavior

Resulting ssh command should rely on password authentication.

Environment Summary

➜  ~ az --version
azure-cli                         2.83.0

core                              2.83.0
telemetry                          1.1.0

Extensions:
account                            0.2.5
bastion                            1.4.2
containerapp                     1.3.0b1
edgezones                        1.0.0b1
ssh                                2.0.6

Dependencies:
msal                            1.35.0b1
azure-mgmt-resource               23.3.0

Python location '/opt/homebrew/Cellar/azure-cli/2.83.0/libexec/bin/python'
Config directory '/Users/florenttatard/.azure'
Extensions directory '/Users/florenttatard/.azure/cliextensions'

Python (Darwin) 3.13.12 (main, Feb  3 2026, 17:53:27) [Clang 17.0.0 (clang-1700.6.3.2)]

Legal docs and information: aka.ms/AzureCliLegal


Your CLI is up-to-date.

Additional context

➜  ~ az extension list
[
  {
    "experimental": false,
    "extensionType": "whl",
    "name": "account",
    "path": "/Users/florenttatard/.azure/cliextensions/account",
    "preview": false,
    "version": "0.2.5"
  },
  {
    "experimental": false,
    "extensionType": "whl",
    "name": "bastion",
    "path": "/Users/florenttatard/.azure/cliextensions/bastion",
    "preview": false,
    "version": "1.4.2"
  },
  {
    "experimental": false,
    "extensionType": "whl",
    "name": "containerapp",
    "path": "/Users/florenttatard/.azure/cliextensions/containerapp",
    "preview": true,
    "version": "1.3.0b1"
  },
  {
    "experimental": false,
    "extensionType": "whl",
    "name": "edgezones",
    "path": "/Users/florenttatard/.azure/cliextensions/edgezones",
    "preview": true,
    "version": "1.0.0b1"
  },
  {
    "experimental": false,
    "extensionType": "whl",
    "name": "ssh",
    "path": "/Users/florenttatard/.azure/cliextensions/ssh",
    "preview": false,
    "version": "2.0.6"
  }
]

[yonzhan]

Thank you for opening this issue, we will look into it.

[microsoft-github-policy-service]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @isamorris, @bastionsuppgithub.

[FlorentATo]

@yonzhan It's quite frustrating to see this automated reply when dozen of issues from several years ago are still open today and have received zero follow-up from you ever since.

I spent a significant amount of my time crawling through all the issues (opened and closed), looking for workarounds. I lost count of how many times I've seen this reply and, to be frank, it simply feels dishonest toward your customers at this point.

You should consider removing this auto-reply if you don't actually plan work on this issue.

My 2 cents.

[sebgott]

I am seeing this exact same issue with auth type AAD

az network bastion ssh --name <bastion> --resource-group <bastion-rg> \
--target-resource-id <vm-ref> \
 --auth-type AAD --subscription "xxx"

Azure-cli versions

azure-cli                         2.85.0

core                              2.85.0
telemetry                          1.1.0

Extensions:
bastion                            1.4.3
ssh                                2.0.7

Dependencies:
msal                              1.35.1
azure-mgmt-resource               24.0.0

Python location '/opt/homebrew/Cellar/azure-cli/2.85.0/libexec/bin/python'
Config directory '/Users/x/.azure'
Extensions directory '/Users/x/.azure/cliextensions'

Python (Darwin) 3.13.13 (main, Apr  7 2026, 18:19:01) [Clang 21.0.0 (clang-2100.0.123.102)]

Legal docs and information: aka.ms/AzureCliLegal


Your CLI is up-to-date.

Error

s.g@email.com@localhost: Permission denied (publickey).

[a0x1ab]

Bug Summary

Command: az network bastion ssh --auth-type password --username <user>

Problem: When --auth-type password is specified, the CLI still attempts SSH connection using public key authentication on the local tunnel port, resulting in Permission denied (publickey) even though the target VM accepts password auth.

Error: ftatard@localhost: Permission denied (publickey).

Extension: bastion v1.4.2
CLI version: 2.83.0 (macOS arm64)

Key Details for Copilot

• The bug is in the bastion extension at azext_bastion/custom.py (line 107 references pkg_resources)
• When building the local SSH tunnel command, the --auth-type password flag is not being translated into the correct SSH options (e.g., -o PreferredAuthentications=password -o PubkeyAuthentication=no)
• A second user (sebgott) confirms the same issue also occurs with --auth-type AAD
• The fix likely involves checking auth_type before invoking the SSH subprocess and adjusting SSH options accordingly

Suggested Investigation

1. Look at azext_bastion/custom.py around the SSH command construction — find where the local SSH connection is made to the tunnel port
2. Check how auth_type parameter is (or isn't) passed through to SSH options
3. Ensure password auth type disables pubkey auth and prompts for password; AAD type should use its own flow

---

Posted by agent-assist (autonomous bug-fix pipeline).