Add support for delegated Kerberos tickets during Negotiate authentication.

net/http/http_auth_handler_negotiate.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_HANDLER_NEGOTIATE_H_
 #define NET_HTTP_HTTP_AUTH_HANDLER_NEGOTIATE_H_
 #pragma once
 
 #include <string>
 
@@ skipping 123 matching lines @@
   };
 
   void OnIOComplete(int result);
   void DoCallback(int result);
   int DoLoop(int result);
 
   int DoResolveCanonicalName();
   int DoResolveCanonicalNameComplete(int rv);
   int DoGenerateAuthToken();
   int DoGenerateAuthTokenComplete(int rv);
+  bool CanDelegate() const;
 
   AuthSystem auth_system_;
   bool disable_cname_lookup_;
   bool use_port_;
   CompletionCallbackImpl<HttpAuthHandlerNegotiate> io_callback_;
   scoped_refptr<HostResolver> resolver_;
 
   // Members which are needed for DNS lookup + SPN.
   AddressList address_list_;
   scoped_ptr<SingleRequestHostResolver> single_resolve_;
 
   // Things which should be consistent after first call to GenerateAuthToken.
   bool already_called_;
   bool has_username_and_password_;
   string16 username_;
   string16 password_;
   std::wstring spn_;
 
   // Things which vary each round.
   CompletionCallback* user_callback_;
   std::string* auth_token_;
 
   State next_state_;
 
-  URLSecurityManager* url_security_manager_;
+  const URLSecurityManager* url_security_manager_;
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_HANDLER_NEGOTIATE_H_