{"body":"--- a/keystone/tests/unit/identity/test_backend_sql.py\n+++ b/keystone/tests/unit/identity/test_backend_sql.py\n@@ -696,9 +696,9 @@ class PasswordExpiresValidationTests(test_backend_sql.SqlTests):\n                                        password=self.password)\n \n     def test_authenticate_with_expired_password_for_ignore_user_option(self):\n-        # update the user to have the 'ignore_password_expiry' option set.\n+        # set user to have the 'ignore_password_expiry' option set to False\n         self.user_dict.setdefault('options', {})[\n-            iro.IGNORE_PASSWORD_EXPIRY_OPT.option_name] = True\n+            iro.IGNORE_PASSWORD_EXPIRY_OPT.option_name] = False\n         # set password created_at so that the password will expire\n         password_created_at = (\n             datetime.datetime.utcnow() -\n@@ -706,22 +706,22 @@ class PasswordExpiresValidationTests(test_backend_sql.SqlTests):\n                 days=CONF.security_compliance.password_expires_days + 1)\n         )\n         user = self._create_user(self.user_dict, password_created_at)\n-        # test password is not expired due to ignore list\n-        self.identity_api.authenticate(self.make_request(),\n-                                       user_id=user['id'],\n-                                       password=self.password)\n-\n-        # update user to explicitly have the expiry option to False\n-        user['options'][\n-            iro.IGNORE_PASSWORD_EXPIRY_OPT.option_name] = False\n-        user = self.identity_api.update_user(user['id'],\n-                                             user)\n         self.assertRaises(exception.PasswordExpired,\n                           self.identity_api.authenticate,\n                           self.make_request(),\n                           user_id=user['id'],\n                           password=self.password)\n \n+        # update user to explicitly have the expiry option to True\n+        user['options'][\n+            iro.IGNORE_PASSWORD_EXPIRY_OPT.option_name] = True\n+        user = self.identity_api.update_user(user['id'],\n+                                             user)\n+        # test password is not expired due to ignore option\n+        self.identity_api.authenticate(self.make_request(),\n+                                       user_id=user['id'],\n+                                       password=self.password)\n","name":"","extension":"txt","url":"https://www.irccloud.com/pastebin/lRdJhOap","modified":1485549689,"id":"lRdJhOap","size":2350,"lines":43,"own_paste":false,"theme":"","date":1485549689}