| OLD | NEW |
| 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/policy/cloud_policy_controller.h" | 5 #include "chrome/browser/policy/cloud_policy_controller.h" |
| 6 | 6 |
| 7 #include <algorithm> | 7 #include <algorithm> |
| 8 #include <string> |
| 8 | 9 |
| 9 #include "base/bind.h" | 10 #include "base/bind.h" |
| 10 #include "base/logging.h" | 11 #include "base/logging.h" |
| 11 #include "base/metrics/histogram.h" | 12 #include "base/metrics/histogram.h" |
| 12 #include "base/rand_util.h" | 13 #include "base/rand_util.h" |
| 13 #include "base/string_util.h" | 14 #include "base/string_util.h" |
| 15 #include "base/time.h" |
| 14 #include "chrome/browser/policy/cloud_policy_cache_base.h" | 16 #include "chrome/browser/policy/cloud_policy_cache_base.h" |
| 15 #include "chrome/browser/policy/cloud_policy_subsystem.h" | 17 #include "chrome/browser/policy/cloud_policy_subsystem.h" |
| 18 #include "chrome/browser/policy/delayed_work_scheduler.h" |
| 16 #include "chrome/browser/policy/device_management_service.h" | 19 #include "chrome/browser/policy/device_management_service.h" |
| 20 #include "chrome/browser/policy/device_token_fetcher.h" |
| 17 #include "chrome/browser/policy/enterprise_metrics.h" | 21 #include "chrome/browser/policy/enterprise_metrics.h" |
| 22 #include "chrome/browser/policy/policy_notifier.h" |
| 18 #include "chrome/browser/policy/proto/device_management_constants.h" | 23 #include "chrome/browser/policy/proto/device_management_constants.h" |
| 19 #include "chrome/common/guid.h" | 24 #include "chrome/common/guid.h" |
| 20 | 25 |
| 21 namespace { | 26 namespace { |
| 22 | 27 |
| 28 // The maximum ratio in percent of the policy refresh rate we use for adjusting |
| 29 // the policy refresh time instant. The rationale is to avoid load spikes from |
| 30 // many devices that were set up in sync for some reason. |
| 31 const int kPolicyRefreshDeviationFactorPercent = 10; |
| 32 // Maximum deviation we are willing to accept. |
| 33 const int64 kPolicyRefreshDeviationMaxInMilliseconds = 30 * 60 * 1000; |
| 34 |
| 35 // These are the base values for delays before retrying after an error. They |
| 36 // will be doubled each time they are used. |
| 37 const int64 kPolicyRefreshErrorDelayInMilliseconds = |
| 38 5 * 60 * 1000; // 5 minutes. |
| 39 |
| 40 // Default value for the policy refresh rate. |
| 41 const int kPolicyRefreshRateInMilliseconds = 3 * 60 * 60 * 1000; // 3 hours. |
| 42 |
| 23 // Domain names that are known not to be managed. | 43 // Domain names that are known not to be managed. |
| 24 // We don't register the device when such a user logs in. | 44 // We don't register the device when such a user logs in. |
| 25 const char* kNonManagedDomains[] = { | 45 const char* kNonManagedDomains[] = { |
| 26 "@googlemail.com", | 46 "@googlemail.com", |
| 27 "@gmail.com" | 47 "@gmail.com" |
| 28 }; | 48 }; |
| 29 | 49 |
| 30 // Checks the domain part of the given username against the list of known | 50 // Checks the domain part of the given username against the list of known |
| 31 // non-managed domain names. Returns false if |username| is empty or | 51 // non-managed domain names. Returns false if |username| is empty or |
| 32 // in a domain known not to be managed. | 52 // in a domain known not to be managed. |
| 33 bool CanBeInManagedDomain(const std::string& username) { | 53 bool CanBeInManagedDomain(const std::string& username) { |
| 34 if (username.empty()) { | 54 if (username.empty()) { |
| 35 // This means incognito user in case of ChromiumOS and | 55 // This means incognito user in case of ChromiumOS and |
| 36 // no logged-in user in case of Chromium (SigninService). | 56 // no logged-in user in case of Chromium (SigninService). |
| 37 return false; | 57 return false; |
| 38 } | 58 } |
| 39 for (size_t i = 0; i < arraysize(kNonManagedDomains); i++) { | 59 for (size_t i = 0; i < arraysize(kNonManagedDomains); i++) { |
| 40 if (EndsWith(username, kNonManagedDomains[i], true)) { | 60 if (EndsWith(username, kNonManagedDomains[i], true)) { |
| 41 return false; | 61 return false; |
| 42 } | 62 } |
| 43 } | 63 } |
| 44 return true; | 64 return true; |
| 45 } | 65 } |
| 46 | 66 |
| 47 } | 67 } // namespace |
| 48 | 68 |
| 49 namespace policy { | 69 namespace policy { |
| 50 | 70 |
| 51 namespace em = enterprise_management; | 71 namespace em = enterprise_management; |
| 52 | 72 |
| 53 // The maximum ratio in percent of the policy refresh rate we use for adjusting | |
| 54 // the policy refresh time instant. The rationale is to avoid load spikes from | |
| 55 // many devices that were set up in sync for some reason. | |
| 56 static const int kPolicyRefreshDeviationFactorPercent = 10; | |
| 57 // Maximum deviation we are willing to accept. | |
| 58 static const int64 kPolicyRefreshDeviationMaxInMilliseconds = 30 * 60 * 1000; | |
| 59 | |
| 60 // These are the base values for delays before retrying after an error. They | |
| 61 // will be doubled each time they are used. | |
| 62 static const int64 kPolicyRefreshErrorDelayInMilliseconds = | |
| 63 5 * 60 * 1000; // 5 minutes | |
| 64 | |
| 65 // Default value for the policy refresh rate. | |
| 66 static const int kPolicyRefreshRateInMilliseconds = | |
| 67 3 * 60 * 60 * 1000; // 3 hours. | |
| 68 | |
| 69 CloudPolicyController::CloudPolicyController( | 73 CloudPolicyController::CloudPolicyController( |
| 70 DeviceManagementService* service, | 74 DeviceManagementService* service, |
| 71 CloudPolicyCacheBase* cache, | 75 CloudPolicyCacheBase* cache, |
| 72 DeviceTokenFetcher* token_fetcher, | 76 DeviceTokenFetcher* token_fetcher, |
| 73 CloudPolicyDataStore* data_store, | 77 CloudPolicyDataStore* data_store, |
| 74 PolicyNotifier* notifier) { | 78 PolicyNotifier* notifier) { |
| 75 Initialize(service, | 79 Initialize(service, |
| 76 cache, | 80 cache, |
| 77 token_fetcher, | 81 token_fetcher, |
| 78 data_store, | 82 data_store, |
| (...skipping 289 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 368 } | 372 } |
| 369 | 373 |
| 370 int64 CloudPolicyController::GetRefreshDelay() { | 374 int64 CloudPolicyController::GetRefreshDelay() { |
| 371 int64 deviation = (kPolicyRefreshDeviationFactorPercent * | 375 int64 deviation = (kPolicyRefreshDeviationFactorPercent * |
| 372 policy_refresh_rate_ms_) / 100; | 376 policy_refresh_rate_ms_) / 100; |
| 373 deviation = std::min(deviation, kPolicyRefreshDeviationMaxInMilliseconds); | 377 deviation = std::min(deviation, kPolicyRefreshDeviationMaxInMilliseconds); |
| 374 return policy_refresh_rate_ms_ - base::RandGenerator(deviation + 1); | 378 return policy_refresh_rate_ms_ - base::RandGenerator(deviation + 1); |
| 375 } | 379 } |
| 376 | 380 |
| 377 } // namespace policy | 381 } // namespace policy |
| OLD | NEW |