Add support for delegated Kerberos tickets during Negotiate authentication.

chrome/browser/io_thread.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/io_thread.h"
 
 #include "base/command_line.h"
 #include "base/leak_tracker.h"
 #include "base/logging.h"
 #include "base/string_number_conversions.h"
@@ skipping 230 matching lines @@
   deferred_net_log_to_delete_.reset();
   BrowserProcessSubThread::CleanUpAfterMessageLoopDestruction();
 }
 
 net::HttpAuthHandlerFactory* IOThread::CreateDefaultAuthHandlerFactory(
     net::HostResolver* resolver) {
   const CommandLine& command_line = *CommandLine::ForCurrentProcess();
 
   // Get the whitelist information from the command line, create an
   // HttpAuthFilterWhitelist, and attach it to the HttpAuthHandlerFactory.
-  net::HttpAuthFilterWhitelist* auth_filter = NULL;
+  net::HttpAuthFilterWhitelist* auth_filter_default_credentials = NULL;
   if (command_line.HasSwitch(switches::kAuthServerWhitelist)) {
-    std::string auth_server_whitelist =
-        command_line.GetSwitchValueASCII(switches::kAuthServerWhitelist);
-    // Create a whitelist filter.
-    auth_filter = new net::HttpAuthFilterWhitelist();
-    auth_filter->SetWhitelist(auth_server_whitelist);
+    auth_filter_default_credentials = new net::HttpAuthFilterWhitelist(
+        command_line.GetSwitchValueASCII(switches::kAuthServerWhitelist));
+  }
+  net::HttpAuthFilterWhitelist* auth_filter_delegate = NULL;
+  if (command_line.HasSwitch(switches::kAuthNegotiateDelegateWhitelist)) {
+    auth_filter_delegate = new net::HttpAuthFilterWhitelist(
+        command_line.GetSwitchValueASCII(
+            switches::kAuthNegotiateDelegateWhitelist));
   }
   globals_->url_security_manager.reset(
-      net::URLSecurityManager::Create(auth_filter));
+      net::URLSecurityManager::Create(auth_filter_default_credentials,
+                                      auth_filter_delegate));
 
   // Determine which schemes are supported.
   std::string csv_auth_schemes = "basic,digest,ntlm,negotiate";
   if (command_line.HasSwitch(switches::kAuthSchemes))
     csv_auth_schemes = StringToLowerASCII(
         command_line.GetSwitchValueASCII(switches::kAuthSchemes));
   std::vector<std::string> supported_schemes;
   SplitString(csv_auth_schemes, ',', &supported_schemes);
 
   return net::HttpAuthHandlerRegistryFactory::Create(
@@ skipping 44 matching lines @@
     net::HostCache* host_cache =
         globals_->host_resolver.get()->GetAsHostResolverImpl()->cache();
     if (host_cache)
       host_cache->clear();
   }
   // Clear all of the passively logged data.
   // TODO(eroman): this is a bit heavy handed, really all we need to do is
   //               clear the data pertaining to off the record context.
   globals_->net_log->passive_collector()->Clear();
 }