Handle login and password error for the domain join

chrome/app/chromeos_strings.grdp

 <?xml version="1.0" encoding="utf-8"?>
 <!-- Chrome OS-specific strings (included from generated_resources.grd).
      Everything in this file is wrapped in <if expr="chromeos">. -->
 <grit-part>
   <message name="IDS_EMPTY_STRING" desc="Empty string, exist only to make code generic. No translation required.">
   </message>
   <!-- Idle logout dialog for retail mode -->
   <message name="IDS_IDLE_LOGOUT_TITLE" desc="Dialog title for the idle logout dialog. Used in retail mode only.">
     Are you still there?
   </message>
@@ skipping 6219 matching lines @@
   <message name="IDS_ENTERPRISE_ENROLLMENT_ASSET_ID_LABEL" desc="Label for asset id text box on the device naming screen in the enterprise enrollment dialog.">
     Asset Identifier
   </message>
   <message name="IDS_ENTERPRISE_ENROLLMENT_LOCATION_LABEL" desc="Label for location tex box on the device naming screen in the enterprise enrollment dialog.">
     Device Location
   </message>
   <message name="IDS_AD_MACHINE_NAME_INPUT_LABEL" desc="Label for machine name input field on the AD domain join screen. User should tell us the name of his machine.">
     Chromebook machine name
   </message>
   <message name="IDS_AD_DOMAIN_JOIN_WELCOME_MESSAGE" desc="Welcome message on the AD domain join screen.">
-    Join AD domain
+    Join device to domain
   </message>
   <message name="IDS_AD_DOMAIN_AUTH_WELCOME_MESSAGE" desc="Welcome message on the AD Authentication user screen. Include the domain (realm) the machine joined to">
-    Login to <ph name="REALM">$1<ex>example.com</ex></ph>
+    Sign in to <ph name="REALM">$1<ex>example.com</ex></ph>
   </message>
   <message name="IDS_AD_LOGIN_USER" desc="Label for userPrincipalName input field on both AD domain join and AD Authentication user screens. Looks like user@example.com where example.com is realm">
     Username (e.g. user@example.com)
   </message>
   <message name="IDS_AD_LOGIN_PASSWORD" desc="Label for Password input field on both AD domain join and AD Authorization user screens..">
     Password
   </message>
+  <message name="IDS_AD_DOMAIN_JOIN_UNKNOWN_ERROR" desc="Default error text on the Active Directory join screen">
+    Oops!  Something went wrong when trying to join the domain.  Please try again.
+  </message>
+  <message name="IDS_AD_INVALID_USERNAME" desc="Alert message about invalid username on the Active Directory domain join screen.">
+    Please enter a valid username
+  </message>
+  <message name="IDS_AD_INVALID_PASSWORD" desc="Alert message about mismatching username and password in the Active Directory">
+    The username and password you entered don't match

[dskaram, 2017/01/17 10:30:50]

don't --> do not

[Roman Sorokin (ftl), 2017/01/17 12:21:46]

Done.

+  </message>
+  <message name="IDS_AD_MACHINENAME_INVALID" desc="Alert message about invalid machine name">
+    Invalid machine name
+  </message>
+  <message name="IDS_AD_MACHINENAME_TOO_LONG" desc="Alert message about too long machine name">
+    Machine name too long
+  </message>
+  <message name="IDS_AD_USER_DENIED_TO_JOIN_MACHINE" desc="Alert message user was denied to join machine to the domain">
+    Failed to join machine to the domain.
+    Do you have sufficient permissions to create machine accounts?

[dskaram, 2017/01/17 10:30:50]

Failed to join the machine to the domain. This might be due to insufficient
privileges for your account on the server.

Though ideally we put the latter part of the sentence in some bubble hover. Is
that possible? Is this error showing in a screen on its own (like the Oops!
error) or inline on the Join domain screen? If the former, then it should be
fine if it's two sentences and no hover is needed.

[Roman Sorokin (ftl), 2017/01/17 12:21:46]

It's former.

+  </message>
+  <message name="IDS_AD_USER_HIT_JOIN_QUOTA" desc="Alert message that user can't add more machines to the domain">
+    Failed to join machine to the domain.
+    You've probably added maximum number machines to the domain.

[dskaram, 2017/01/17 10:30:50]

Failed to join the machine to the domain. This might be due to exceeding the
maximum number of allowed machine joins for your account on the server.

Same comment as above.

[Roman Sorokin (ftl), 2017/01/17 12:21:46]

Done.

+  </message>
   <message name="IDS_ENTERPRISE_ENROLLMENT_ATTRIBUTE_EXPLANATION" desc="Device attribute message to be shown on attribute update prompt screen.">
     Optional — enter new or update existing information to be associated with this device.
   </message>
   <message name="IDS_ENTERPRISE_ENROLLMENT_EXPLAIN_ATTRIBUTE_LINK" desc="Text on the link to the device attribute update help article.">
     Learn more.
   </message>
 
   <!-- About network UI display strings -->
   <message name="IDS_NETWORK_UI_TITLE" desc="Title of the page">
     Network
@@ skipping 383 matching lines @@
     Attempts left: $1
   </message>
   <message name="IDS_REQUEST_PIN_DIALOG_PIN" desc="The Provider Identification Number abbreviation">
     PIN
   </message>
   <message name="IDS_REQUEST_PIN_DIALOG_PUK" desc="The Personal Unlocking Key (as used in mobile phones) abbreviation">
     PUK
   </message>
 
 </grit-part>