Azure CLI command fails: AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client'...

[arpitg-sh]

Describe the bug

2025-05-07 07:02:22.965 - DEBUG - az - Executing az acr import -n viennadroptest --source linuxgeneva-microsoft.azurecr.io/distroless/genevamdm:recommended -t distroless/genevamdm:recommended-individualci.vienna.171304749 --subscription f1d79e73-f8e3-4b10-bfdb-4207ca0723ed -g viennadroptest --output json

ERROR: The command failed with an unexpected error. Here is the traceback:
ERROR: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/tmp/aml-ve/lib/python3.9/site-packages/msal/throttled_http_client.py'>

<lambda> @ /tmp/aml-ve/lib/python3.9/site-packages/tenacity/__init__.py:400
result @ /opt/hostedtoolcache/Python/3.9.21/x64/lib/python3.9/concurrent/futures/_base.py:439
__get_result @ /opt/hostedtoolcache/Python/3.9.21/x64/lib/python3.9/concurrent/futures/_base.py:391
__call__ @ /tmp/aml-ve/lib/python3.9/site-packages/tenacity/__init__.py:480
_az @ /tmp/aml-ve/lib/python3.9/site-packages/msftkube/az.py:132
AzCliExecutionException: Exit Code:1, Result:Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/tmp/aml-ve/lib/python3.9/site-packages/msal/throttled_http_client.py'>
Execution failed, detailed log: /tmp/msftkube-build_runner-20250507-090609.log

### Related command

az acr import -n viennadroptest --source linuxgeneva-microsoft.azurecr.io/distroless/genevamdm:recommended -t distroless/genevamdm:recommended-individualci.vienna.171304749 --subscription f1d79e73-f8e3-4b10-bfdb-4207ca0723ed -g viennadroptest --output json

or 

`az acr repository show -n viennadroptest --image distroless/genevamdm:recommended-schedule.vienna.171319204 --subscription f1d79e73-f8e3-4b10-bfdb-4207ca0723ed --output json`

### Errors

ERROR: The command failed with an unexpected error. Here is the traceback:
ERROR: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/tmp/aml-ve/lib/python3.9/site-packages/msal/throttled_http_client.py'>

### Issue script & Debug output

<lambda> @ /tmp/aml-ve/lib/python3.9/site-packages/tenacity/__init__.py:400
result @ /opt/hostedtoolcache/Python/3.9.21/x64/lib/python3.9/concurrent/futures/_base.py:439
__get_result @ /opt/hostedtoolcache/Python/3.9.21/x64/lib/python3.9/concurrent/futures/_base.py:391
__call__ @ /tmp/aml-ve/lib/python3.9/site-packages/tenacity/__init__.py:480
_az @ /tmp/aml-ve/lib/python3.9/site-packages/msftkube/az.py:132
AzCliExecutionException: Exit Code:1, Result:Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/tmp/aml-ve/lib/python3.9/site-packages/msal/throttled_http_client.py'>
Execution failed, detailed log: /tmp/msftkube-build_runner-20250507-090609.log

### Expected behavior

It should do the acr import

### Environment Summary

/usr/bin/az --version
azure-cli                         2.72.0

core                              2.72.0
telemetry                          1.1.0

Extensions:
azure-devops                       1.0.1

Dependencies:
msal                              1.32.3
azure-mgmt-resource               23.1.1

Python location '/opt/az/bin/python3'


### Additional context

_No response_

[yonzhan]

Thank you for opening this issue, we will look into it.

[astha-21]

I'm also facing same issue.

[arpitg-sh]

I've been facing this issue since today itself. Although it is working for few other pipelines, but consistently failing with this error within our workload.

[pranavkevadiya]

I am also facing this issue in multiple pipelines. Is there any workaround identified so far?

We are getting for python3.12
AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/opt/az/lib/python3.12/site-packages/msal/throttled_http_client.py'>. Did you mean: '_msal_public_app_kwargs'?

I assume, it might not be related to a specific az cli version. Is something wrong with the server?

[zhoxing-ms]

@lizMSFT Could you please help take a look at the acr related issue?

[arpitg-sh]

Here is the full traceback -

2025-05-07T10:15:11.9347613Z 2025-05-07 10:15:11.934 - DEBUG - az - Executing az acr repository show -n viennadroptest --image distroless/genevamdm:recommended-manual.vienna.171324086 --subscription f1d79e73-f8e3-4b10-bfdb-4207ca0723ed --output json
2025-05-07T10:15:13.1942859Z ERROR: The command failed with an unexpected error. Here is the traceback:
2025-05-07T10:15:13.1944245Z ERROR: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/tmp/aml-ve/lib/python3.9/site-packages/msal/throttled_http_client.py'>
2025-05-07T10:15:13.1944539Z Traceback (most recent call last):
2025-05-07T10:15:13.1944788Z File "/tmp/aml-ve/lib/python3.9/site-packages/knack/cli.py", line 233, in invoke
2025-05-07T10:15:13.1945067Z cmd_result = self.invocation.execute(args)
2025-05-07T10:15:13.1945307Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/init.py", line 666, in execute
2025-05-07T10:15:13.1945665Z raise ex
2025-05-07T10:15:13.1945886Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/init.py", line 733, in _run_jobs_serially
2025-05-07T10:15:13.1946134Z results.append(self._run_job(expanded_arg, cmd_copy))
2025-05-07T10:15:13.1946393Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/init.py", line 703, in _run_job
2025-05-07T10:15:13.1953406Z result = cmd_copy(params)
2025-05-07T10:15:13.1953802Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/init.py", line 336, in call
2025-05-07T10:15:13.1954257Z return self.handler(*args, **kwargs)
2025-05-07T10:15:13.1954554Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/command_operation.py", line 363, in handler
2025-05-07T10:15:13.1954953Z show_exception_handler(ex)
2025-05-07T10:15:13.1955163Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/arm.py", line 432, in show_exception_handler
2025-05-07T10:15:13.1955347Z raise ex
2025-05-07T10:15:13.1955535Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/command_operation.py", line 361, in handler
2025-05-07T10:15:13.1955730Z return op(**command_args)
2025-05-07T10:15:13.1955948Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/repository.py", line 270, in acr_repository_show
2025-05-07T10:15:13.1956163Z return _acr_repository_attributes_helper(
2025-05-07T10:15:13.1956386Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/repository.py", line 348, in _acr_repository_attributes_helper
2025-05-07T10:15:13.1956631Z login_server, username, password = get_access_credentials(
2025-05-07T10:15:13.1956882Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/_docker_utils.py", line 493, in get_access_credentials
2025-05-07T10:15:13.1957100Z return _get_credentials(cmd,
2025-05-07T10:15:13.1957307Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/_docker_utils.py", line 346, in _get_credentials
2025-05-07T10:15:13.1957555Z registry, resource_group_name = get_registry_by_name(cli_ctx, registry_name, resource_group_name)
2025-05-07T10:15:13.1957801Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/_utils.py", line 109, in get_registry_by_name
2025-05-07T10:15:13.1958024Z resource_group_name = get_resource_group_name_by_registry_name(
2025-05-07T10:15:13.1958263Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/_utils.py", line 88, in get_resource_group_name_by_registry_name
2025-05-07T10:15:13.1958492Z arm_resource = _arm_get_resource_by_name(
2025-05-07T10:15:13.1958828Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/command_modules/acr/_utils.py", line 43, in _arm_get_resource_by_name
2025-05-07T10:15:13.1959061Z result = get_resources_in_subscription(cli_ctx, resource_type)
2025-05-07T10:15:13.1959317Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/parameters.py", line 136, in get_resources_in_subscription
2025-05-07T10:15:13.1959558Z rcf = get_mgmt_service_client(cli_ctx, ResourceType.MGMT_RESOURCE_RESOURCES)
2025-05-07T10:15:13.1959795Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/client_factory.py", line 83, in get_mgmt_service_client
2025-05-07T10:15:13.1960044Z client, _ = _get_mgmt_service_client(cli_ctx, client_type, subscription_id=subscription_id,
2025-05-07T10:15:13.1960292Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/commands/client_factory.py", line 236, in _get_mgmt_service_client
2025-05-07T10:15:13.1960531Z credential, subscription_id, _ = profile.get_login_credentials(
2025-05-07T10:15:13.1960711Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/_profile.py", line 377, in get_login_credentials
2025-05-07T10:15:13.1960897Z credential = self._create_credential(account, client_id=client_id)
2025-05-07T10:15:13.1961085Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/_profile.py", line 637, in _create_credential
2025-05-07T10:15:13.1961270Z return identity.get_service_principal_credential(username_or_sp_id)
2025-05-07T10:15:13.1961464Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/auth/identity.py", line 253, in get_service_principal_credential
2025-05-07T10:15:13.1961669Z return ServicePrincipalCredential(client_id, client_credential, **self._msal_app_kwargs)
2025-05-07T10:15:13.1961867Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/auth/identity.py", line 103, in _msal_app_kwargs
2025-05-07T10:15:13.1962049Z Identity._msal_http_cache = self._load_msal_http_cache()
2025-05-07T10:15:13.1962231Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/auth/identity.py", line 136, in _load_msal_http_cache
2025-05-07T10:15:13.1962483Z http_cache = BinaryCache(self._msal_http_cache_file)
2025-05-07T10:15:13.1962658Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/auth/binary_cache.py", line 28, in init
2025-05-07T10:15:13.1962810Z self.load()
2025-05-07T10:15:13.1962963Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/auth/binary_cache.py", line 44, in load
2025-05-07T10:15:13.1963123Z self.data = self._load()
2025-05-07T10:15:13.1963283Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/decorators.py", line 102, in _wrapped_func
2025-05-07T10:15:13.1963439Z return func(*args, **kwargs)
2025-05-07T10:15:13.1963606Z File "/tmp/aml-ve/lib/python3.9/site-packages/azure/cli/core/auth/binary_cache.py", line 35, in _load
2025-05-07T10:15:13.1963759Z return pickle.load(f)
2025-05-07T10:15:13.1963963Z AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from '/tmp/aml-ve/lib/python3.9/site-packages/msal/throttled_http_client.py'>
2025-05-07T10:15:13.1964194Z To check existing issues, please visit: https://github.com/Azure/azure-cli/issues

[vivi5421]

Hi,

Just for information, I am facing a kind of equivalent issue doing either az account clear, either az login, in Wodows 11 (PowerShell):

Here is my stack:

The command failed with an unexpected error. Here is the traceback:
Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from 'C:\\Program Files\\Microsoft SDKs\\Azure\\CLI2\\Lib\\site-packages\\msal\\throttled_http_client.pyc'>
Traceback (most recent call last):
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 666, in execute
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 703, in _run_job
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 336, in __call__
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/profile/custom.py", line 114, in account_clear
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/_profile.py", line 387, in logout_all
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 207, in logout_all_users
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 123, in _msal_app
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 115, in _msal_public_app_kwargs
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 100, in _msal_app_kwargs
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/identity.py", line 133, in _load_msal_http_cache
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/binary_cache.py", line 28, in __init__
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/binary_cache.py", line 44, in load
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/decorators.py", line 102, in _wrapped_func
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/auth/binary_cache.py", line 35, in _load
AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client' from 'C:\\Program Files\\Microsoft SDKs\\Azure\\CLI2\\Lib\\site-packages\\msal\\throttled_http_client.pyc'>. Did you mean: '_msal_public_app_kwargs'?

System:

az --version
azure-cli                         2.71.0 *

core                              2.71.0 *
telemetry                          1.1.0

Dependencies:
msal                            1.31.2b1
azure-mgmt-resource               23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\<User>\.azure'
Extensions directory 'C:\Users\<User>\.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec  3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

PS C:\workspace> pip show az
WARNING: Package(s) not found: az
PS C:\workspace> pip show msal
Name: msal
Version: 1.32.3
Summary: The Microsoft Authentication Library (MSAL) for Python library enables your app to access the Microsoft Cloud by supporting authentication of users with Microsoft Azure Active Directory accounts (AAD) and Microsoft Accounts (MSA) using industry standard OAuth2 and OpenID Connect.
Home-page: https://github.com/AzureAD/microsoft-authentication-library-for-python
Author: Microsoft Corporation
Author-email: nugetaad@microsoft.com
License: MIT
Location: c:\users\<User>\appdata\local\programs\python\python310\lib\site-packages
Requires: cryptography, PyJWT, requests
Required-by:

[jiasli]

NormalizedResponse is introduced in MSAL 1.32.1.

AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client'... occurs when using old Azure CLI versions <=2.71.0 (with MSAL <=1.32.0) to load ~/.azure/msal_http_cache.bin (%USERPROFILE%\.azure\msal_http_cache.bin on Windows) generated by Azure CLI 2.72.0 (with MSAL 1.32.3 (#31376)).

Azure CLI and MSAL don't support using old versions to load data from newer versions.

Workaround: If you can't update the old Azure CLI that is reading ~/.azure/msal_http_cache.bin, use any of the workarounds:

1. [Recommended] Set environment variable AZURE_CORE_USE_MSAL_HTTP_CACHE=false
2. Run az config set core.use_msal_http_cache=false
3. Delete ~/.azure/msal_http_cache.bin before running the old Azure CLI

Long-term solution: Use the same Azure CLI version (which contains the same MSAL version) to generate and load ~/.azure/msal_http_cache.bin.

[astha-21]

How to upgrade to the newer version? What is the image name for az cli version 2.72.0. I'm using 'windows-latest' and it's installing version 2.71.0 which is giving issues @jiasli

[vivi5421]

NormalizedResponse is introduced in MSAL 1.32.1.

AttributeError: Can't get attribute 'NormalizedResponse' on <module 'msal.throttled_http_client'... occurs when using old Azure CLI versions <=2.71.0 (with MSAL <=1.32.0) to load ~/.azure/msal_http_cache.bin (%USERPROFILE%\.azure\msal_http_cache.bin on Windows) generated by Azure CLI 2.72.0 (with MSAL 1.32.3 (#31376)).

Azure CLI and MSAL don't support using old versions to load data from newer versions. If you insist to do so, you may delete ~/.azure/msal_http_cache.bin before running old versions of Azure CLI.

thanks a lot, this solved the issue in my case.