Kerberos SPN generation for Negotiate challenges

net/http/http_auth_handler_ntlm.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_auth_handler_ntlm.h"
 
 #include "base/base64.h"
 #include "base/logging.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
 #include "net/base/net_errors.h"
+#include "net/base/net_util.h"
 
 namespace net {
 
 int HttpAuthHandlerNTLM::GenerateAuthToken(
     const std::wstring& username,
     const std::wstring& password,
     const HttpRequestInfo* request,
     const ProxyInfo* proxy,
     std::string* auth_token) {
 #if defined(NTLM_SSPI)
   return auth_sspi_.GenerateAuthToken(
       &username,
       &password,
-      origin_,
+      CreateSPN(origin_),
       request,
       proxy,
       auth_token);
 #else  // !defined(NTLM_SSPI)
   // TODO(wtc): See if we can use char* instead of void* for in_buf and
   // out_buf.  This change will need to propagate to GetNextToken,
   // GenerateType1Msg, and GenerateType3Msg, and perhaps further.
   const void* in_buf;
   void* out_buf;
   uint32 in_buf_len, out_buf_len;
@@ skipping 66 matching lines @@
   if (!tok->valid() || !LowerCaseEqualsASCII(tok->scheme(), "ntlm"))
     return false;
 
   tok->set_expect_base64_token(true);
   if (tok->GetNext())
     auth_data_.assign(tok->value_begin(), tok->value_end());
   return true;
 #endif  // defined(NTLM_SSPI)
 }
 
+// static
+std::wstring HttpAuthHandlerNTLM::CreateSPN(const GURL& origin) {
+  // The service principal name of the destination server.  See
+  // http://msdn.microsoft.com/en-us/library/ms677949%28VS.85%29.aspx
+  std::wstring target(L"HTTP/");
+  target.append(ASCIIToWide(GetHostAndPort(origin)));
+  return target;
+}
+
 }  // namespace net