Linux(Azure VM)の認証をAzure ADのアカウントで行う

PS C:\>az vm extension set –publisher Microsoft.Azure.ActiveDirectory.LinuxSSH –name AADLoginForLinux –resource-group リソースグループ名 –vm-name VM名

{
“id": “/subscriptions/<中略>/virtualMachines/VM名/extensions/AADLoginForLinux",
“name": “AADLoginForLinux",
“provisioningState": “Succeeded",
“publisher": “Microsoft.Azure.ActiveDirectory.LinuxSSH",
“type": “Microsoft.Compute/virtualMachines/extensions",
“typeHandlerVersion": “1.0",
“typePropertiesType": “AADLoginForLinux"
}

PS C:\>ssh -l ippan-user-01@xxxxx.xxxxx.com VMのIPアドレス
This feature is now deprecated. Learn more at https://aka.ms/AADSSHLogin
When you sign in, verify the name of the app on the sign-in screen is “Azure Linux VM Sign-in" and the IP address of the target VM is correct. the IP address of the target VM is corre

To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXXXX to authenticate. 

Press ENTER when ready.

[ippan-user-01@XXXXX.XXXXX.com@user-login-test-01 ~]$ id
uid=20801XX(ippan-user-01@XXXXX.XXXXX.com.com) gid=20801XX(ippan-user-01@XXXXX.XXXXX.com) groups=20801XX(ippan-user-01@XXXXX.XXXXX.com) 

[ippan-user-01@XXXXX.XXXXX.com@user-login-test-01 ~]$ sudo su –

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

This feature is now deprecated. Learn more at https://aka.ms/AADSSHLogin
When you sign in, verify the name of the app on the sign-in screen is “Azure Linux VM Sign-in" and the IP address of the target VM is correct.

To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXXXX to authenticate.
ippan-user-01@XXXXX.XXXXX.com is not in the sudoers file. This incident will be reported.

PS C:\>ssh -l kanrisha-user-01@xxxxx.xxxxx.com VMのIPアドレス
This feature is now deprecated. Learn more at https://aka.ms/AADSSHLogin
When you sign in, verify the name of the app on the sign-in screen is “Azure Linux VM Sign-in" and the IP address of the target VM is correct. the IP address of the target VM is core

To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXXXX to authenticate. 

Press ENTER when ready.

[kanrisha-user-01@XXXXX.XXXXX.com@user-login-test-01 ~]$ id
uid=8032XX(kanrisha-user-01@XXXXX.XXXXX.com) gid=8032XX(kanrisha-user-01@XXXXX.XXXXX.com) groups=8032XX(kanrisha-user-01@XXXXX.XXXXX.com),10(wheel),1001(aad_admins)

[kanrisha-user-01@XXXXX.XXXXX.com@user-login-test-01 ~]$ sudo su –

We trust you have received the usual lecture from the local System
Administrator. It usually boils down to these three things:

#1) Respect the privacy of others.
#2) Think before you type.
#3) With great power comes great responsibility.

This feature is now deprecated. Learn more at https://aka.ms/AADSSHLogin
When you sign in, verify the name of the app on the sign-in screen is “Azure Linux VM Sign-in" and the IP address of the target VM is correct.

To sign in, use a web browser to open the page https://microsoft.com/devicelogin and enter the code XXXXXXXXX to authenticate.
[root@user-login-test-01 ~]#

[root@user-login-test-01 sudoers.d]# cat /etc/sudoers.d/aad_admins
%aad_admins ALL=(ALL) NOPASSWD:ALL

[root@user-login-test-01 ~]# grep aad_admins /etc/group
aad_admins:x:1001: