Authenticate user/password with PAM in BeginSessionRequest()

remoting/host/user_auth_pam.h

Index: remoting/host/user_auth_pam.h
diff --git a/remoting/host/user_auth_pam.h b/remoting/host/user_auth_pam.h
new file mode 100644
index 0000000000000000000000000000000000000000..261b6da810fe1acf2ddffecd9243774ddb68f423
--- /dev/null
+++ b/remoting/host/user_auth_pam.h
@@ -0,0 +1,40 @@
+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef REMOTING_HOST_USER_AUTH_PAM_H_
+#define REMOTING_HOST_USER_AUTH_PAM_H_
+
+#include <string>
+
+#include "base/basictypes.h"
+#include "base/scoped_ptr.h"
+
+namespace remoting {
+
+class UserAuthPamPimpl;
+
+// Class to perform a single PAM user authentication.
+// This object wraps a single PAM handle, so a separate instance should be
+// used for each authentication sequence (pam_start..pam_end).
+//
+// TODO(lambroslambrou): As pam_authenticate() can be blocking, this needs to
+// expose an asynchronous API, with pam_authenticate() called in a background
+// thread.
+class UserAuthPam {

[Sergey Ulanov, 2011/02/11 19:35:20]

I think we should have generic interface called UserAuthenticator, or UserAuth
(I would prefer UserAuthenticator, but feel free to disagree). And this class
should be an implementation of that interface.

+ public:
+  UserAuthPam();
+  ~UserAuthPam();
+  bool Authenticate(const std::string& username,
+                    const std::string& password);
+
+ private:
+  friend class UserAuthPamPimpl;
+  scoped_ptr<UserAuthPamPimpl> pimpl_;
+
+  DISALLOW_COPY_AND_ASSIGN(UserAuthPam);
+};
+
+}  // namespace remoting
+
+#endif  // REMOTING_HOST_USER_AUTH_PAM_H_