az login doesn't work under VPN

[nikolajbrinch]

Describe the bug
when trying az login on macOS 10.13.6 I get the following error:

neko@rock $ az login
Port '8400' is taken. Trying with the next one
Port '8401' is taken. Trying with the next one
Port '8402' is taken. Trying with the next one
...
Port '8998' is taken. Trying with the next one
Port '8999' is taken. Trying with the next one
Exception in thread Thread-1:
Traceback (most recent call last):
File "/usr/local/Cellar/python/3.7.0/Frameworks/Python.framework/Versions/3.7/lib/python3.7/threading.py", line 917, in _bootstrap_inner
self.run()
File "/usr/local/Cellar/python/3.7.0/Frameworks/Python.framework/Versions/3.7/lib/python3.7/threading.py", line 865, in run
self._target(*self._args, **self._kwargs)
File "/usr/local/Cellar/azure-cli/2.0.45/libexec/lib/python3.7/site-packages/azure/cli/core/_profile.py", line 1030, in _get_authorization_code_worker
if reply_url is None:
UnboundLocalError: local variable 'reply_url' referenced before assignment

Login failed

To Reproduce
try az login under Homebrew installed to default location on macOS 10.13.6

Expected behavior
A browser opens and I'm able to login

Environment summary
Reinstall Homebrew to default installation, installed python3 under Homebrew, install azure-cli under Homebrew. Moved away old .azure .azure-shell from $HOME

Additional context
Checked for blocked ports on my machine, they are not in use.

[trallard]

I am experiencing the same issue at the moment although running in MacOS 10.13.5

[tjprescott]

Yugang Wang (@yugangw-msft) any thoughts?

[yugangw-msft]

Let me find a repro first.

[yugangw-msft]

Tania Allard (@trallard) Nikolaj Brinch Jørgensen (@nikolajbrinch), I can't repro in my mac. I have submitted code change to report the real error. Since the upcoming release will take a few more weeks, at the same time if you have python background, could you run the following code and share with me the error?

from six.moves import BaseHTTPServer

class ClientRedirectHandler(BaseHTTPServer.BaseHTTPRequestHandler):
    def do_GET(self):
        pass

web_server = BaseHTTPServer.HTTPServer(('localhost', 8401), ClientRedirectHandler)
print('no repro')

Don't want to pollute the default python env in your mac, you can create a python virtual env, say

python3 -m venv env
. env/bin/activate
pip install six
python test.py  <<--- this file has my code snippet

[trallard]

Yugang Wang (@yugangw-msft)

I think my problem originated from installing Anaconda and making this Python my default one as I get now this error

Traceback (most recent call last):
  File "/anaconda3/lib/python3.6/threading.py", line 916, in _bootstrap_inner
    self.run()
  File "/anaconda3/lib/python3.6/threading.py", line 864, in run
    self._target(*self._args, **self._kwargs)
  File "/Users/tania.allard/opt/homebrew/Cellar/azure-cli/2.0.45/libexec/lib/python3.7/site-packages/azure/cli/core/_profile.py", line 1030, in _get_authorization_code_worker
    if reply_url is None:
UnboundLocalError: local variable 'reply_url' referenced before assignment

So I then used brew link --overwrite python to link to the cellar python version and got the same issue once again

Exception in thread Thread-1:
Traceback (most recent call last):
  File "/Users/tania.allard/opt/homebrew/Cellar/python/3.7.0/Frameworks/Python.framework/Versions/3.7/lib/python3.7/threading.py", line 917, in _bootstrap_inner
    self.run()
  File "/Users/tania.allard/opt/homebrew/Cellar/python/3.7.0/Frameworks/Python.framework/Versions/3.7/lib/python3.7/threading.py", line 865, in run
    self._target(*self._args, **self._kwargs)
  File "/Users/tania.allard/opt/homebrew/Cellar/azure-cli/2.0.45/libexec/lib/python3.7/site-packages/azure/cli/core/_profile.py", line 1030, in _get_authorization_code_worker
    if reply_url is None:
UnboundLocalError: local variable 'reply_url' referenced before assignment

Finally, when running the snippet it returns no repro so I am lost for what might be causing the issue

[yugangw-msft]

Tania Allard (@trallard), when you ran the snippet, can you confirm the python comes from the same cellar python or some other places?
local variable 'reply_url' referenced before assignment is a bad error which I have fixed in the linked PR
We have tried in macOS (10.12.6 Sierra and 10.13 High-Sierra), CLI work fine with Python 3.7
I suggest try new CLI to be released on 9/23 which should help you report a better error; at the same time try az login --use-device-code to get yourself unblocked. Sorry for the inconvenience.

[nikolajbrinch]

This is a matter of network setup at my client. I can do everything fine connecting to the client network from VPN. My direct connection (LAN/Wifi) goes through some security stuff that only allows specific MAC adresses, and some other nasty stuff has apparently been configured as well, so that I do not have access to do az login.
This ticket can be closed as this is my clients network setup, and not Azure CLI that is the problem.

[nikolajbrinch]

This issue cannot unfortunately not be closed as off yet. I'm still not able to login with the same message as above. I've created a local Ubuntu 18.04 LTS in VMWare Fusion (NAT through my mac network adapter) and it works perfect.
Something strange is going on, on macOS with the Azure CLI az login. I doesn't work for me. I've tried reinstalling homebrew, python3 and azure-cli and it still doesn't work.

[trallard]

For me the az login --use-device-code worked so I am going to use that for now
funny enough the regular az login works perfectly on Windows

[nikolajbrinch]

Yes the --use-device-code works, but regular az login used to work. I can't seem to be able to install old versions of Azure CLI to try if that actually works.

[yugangw-msft]

if you can install the edge builds by following the steps instead of waiting for the official release on 9/23, then you can share with me soon the root error.
az login has to work on mac. The authentication mechanism doesn't assume any platform specifics. Our team are all using mac, but we just can't reproduce.