Make an online wildcard login check for enterprise devices.

chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.cc

Index: chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.cc
diff --git a/chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.cc b/chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.cc
index d5b8e5ca4b394d32c621ba3c657ed9d9294a265a..c7d976e6f41a6372708cdd4f727fc328dc394311 100644
--- a/chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.cc
+++ b/chrome/browser/chromeos/policy/user_cloud_policy_manager_factory_chromeos.cc
@@ -15,6 +15,7 @@
 #include "base/threading/sequenced_worker_pool.h"
 #include "base/time/time.h"
 #include "chrome/browser/browser_process.h"
+#include "chrome/browser/chromeos/login/login_utils.h"
 #include "chrome/browser/chromeos/login/user.h"
 #include "chrome/browser/chromeos/login/user_manager.h"
 #include "chrome/browser/chromeos/policy/browser_policy_connector_chromeos.h"
@@ -199,6 +200,15 @@ scoped_ptr<UserCloudPolicyManagerChromeOS>
           base::MessageLoopProxy::current(),
           file_task_runner,
           io_task_runner));
+
+  bool wildcard_match = false;
+  if (connector->IsEnterpriseManaged() &&
+      chromeos::LoginUtils::IsWhitelisted(username, &wildcard_match) &&
+      wildcard_match &&
+      !connector->IsNonEnterpriseUser(username)) {
+    manager->EnableWildcardLoginCheck(username);
+  }

[Joao da Silva, 2014/01/28 14:45:46]

It's not clear to me why we do this. Is this meant to handle users that somehow
passed through login (or were already added to the device)?

[Mattias Nissler (ping if slow), 2014/01/28 15:44:22]

Yes, this is a best-effort attempt at catching already-existing accounts for the
case where the whitelist changes.

+
   manager->Init(SchemaRegistryServiceFactory::GetForContext(profile));
   manager->Connect(g_browser_process->local_state(),
                    device_management_service,