diff --git a/tests/test_keystoneclient.py b/tests/test_keystoneclient.py
index c56416eaf0..e5337f6e2b 100644
--- a/tests/test_keystoneclient.py
+++ b/tests/test_keystoneclient.py
@@ -214,7 +214,7 @@ class KcMasterTestCase(CompatTestCase):
         self.assertFalse(user.enabled)
 
         # TODO(ja): test that you can't login
-        self.assertRaises(client_exceptions.Unauthorized,
+        self.assertRaises(client_exceptions.Forbidden,
                   self._client,
                   username=test_username,
                   password='password')