Handle login and password error for the domain join

chrome/browser/ui/webui/chromeos/login/enrollment_screen_handler.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/chromeos/login/enrollment_screen_handler.h"
 
 #include <algorithm>
 
 #include "ash/common/system/chromeos/devicetype_utils.h"
 #include "base/bind.h"
@@ skipping 90 matching lines @@
 }
 
 
 // Returns the enterprise domain after enrollment, or an empty string.
 std::string GetEnterpriseDomain() {
   policy::BrowserPolicyConnectorChromeOS* connector =
       g_browser_process->platform_part()->browser_policy_connector_chromeos();
   return connector->GetEnterpriseDomain();
 }
 
+enum ActiveDirectoryErrorState {
+  ERROR_STATE_NONE = 0,
+  ERROR_STATE_MACHINE_NAME_INVALID = 1,
+  ERROR_STATE_MACHINE_NAME_TOO_LONG = 2,
+  ERROR_STATE_BAD_USERNAME = 3,
+  ERROR_STATE_BAD_PASSWORD = 4,
+};
+
 }  // namespace
 
 // EnrollmentScreenHandler, public ------------------------------
 
 EnrollmentScreenHandler::EnrollmentScreenHandler(
     const scoped_refptr<NetworkStateInformer>& network_state_informer,
     NetworkErrorModel* network_error_model)
     : BaseScreenHandler(kJsScreenPath),
       controller_(NULL),
       show_on_init_(false),
@@ skipping 272 matching lines @@
                IDS_ENTERPRISE_ENROLLMENT_ASSET_ID_LABEL);
   builder->Add("oauthEnrollLocationLabel",
                IDS_ENTERPRISE_ENROLLMENT_LOCATION_LABEL);
   builder->Add("oauthEnrollWorking", IDS_ENTERPRISE_ENROLLMENT_WORKING_MESSAGE);
   // Do not use AddF for this string as it will be rendered by the JS code.
   builder->Add("oauthEnrollAbeSuccess", IDS_ENTERPRISE_ENROLLMENT_ABE_SUCCESS);
   builder->Add("oauthEnrollAdMachineNameInput",
                IDS_AD_MACHINE_NAME_INPUT_LABEL);
   builder->Add("oauthEnrollAdDomainJoinWelcomeMessage",
                IDS_AD_DOMAIN_JOIN_WELCOME_MESSAGE);
-  builder->Add("adLoginUser", IDS_AD_LOGIN_USER);
+  builder->Add("adLoginUsername", IDS_AD_LOGIN_USER);
+  builder->Add("adLoginInvalidUsername", IDS_AD_INVALID_USERNAME);
   builder->Add("adLoginPassword", IDS_AD_LOGIN_PASSWORD);
+  builder->Add("adLoginInvalidPassword", IDS_AD_INVALID_PASSWORD);
+  builder->Add("adJoinErrorMachineNameInvalid", IDS_AD_MACHINENAME_INVALID);
+  builder->Add("adJoinErrorMachineNameTooLong", IDS_AD_MACHINENAME_TOO_LONG);
 }
 
 bool EnrollmentScreenHandler::IsOnEnrollmentScreen() const {
   return (GetCurrentScreen() == OobeScreen::SCREEN_OOBE_ENROLLMENT);
 }
 
 bool EnrollmentScreenHandler::IsEnrollmentScreenHiddenByError() const {
   return (GetCurrentScreen() == OobeScreen::SCREEN_ERROR_MESSAGE &&
           network_error_model_->GetParentScreen() ==
               OobeScreen::SCREEN_OOBE_ENROLLMENT);
@@ skipping 127 matching lines @@
       base::Bind(&EnrollmentScreenHandler::OnPasswordPipeReady,
                  weak_ptr_factory_.GetWeakPtr(), machine_name, user_name));
 }
 
 void EnrollmentScreenHandler::OnPasswordPipeReady(
     const std::string& machine_name,
     const std::string& user_name,
     base::ScopedFD password_fd) {
   DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
   if (!password_fd.is_valid()) {
-    LOG(ERROR) << "Got invalid password_fd";
+    DLOG(ERROR) << "Got invalid password_fd";
     return;
   }
   chromeos::AuthPolicyClient* client =
       chromeos::DBusThreadManager::Get()->GetAuthPolicyClient();
 
   client->JoinAdDomain(machine_name,
                        user_name,
                        password_fd.get(),
                        base::Bind(&EnrollmentScreenHandler::HandleAdDomainJoin,
                                   weak_ptr_factory_.GetWeakPtr(),
                                   machine_name,
                                   user_name));
 }
 
 void EnrollmentScreenHandler::HandleAdDomainJoin(
     const std::string& machine_name,
     const std::string& user_name,
     authpolicy::ErrorType code) {
   switch (code) {
     case authpolicy::ERROR_NONE:
       controller_->OnAdJoined(gaia::ExtractDomainName(user_name));
       return;
     case authpolicy::ERROR_UNKNOWN:
     case authpolicy::ERROR_DBUS_FAILURE:
-    case authpolicy::ERROR_PARSE_UPN_FAILED:
-    case authpolicy::ERROR_BAD_USER_NAME:
-    case authpolicy::ERROR_BAD_PASSWORD:
-    case authpolicy::ERROR_PASSWORD_EXPIRED:
-    case authpolicy::ERROR_CANNOT_RESOLVE_KDC:
-    case authpolicy::ERROR_KINIT_FAILED:
     case authpolicy::ERROR_NET_FAILED:
     case authpolicy::ERROR_SMBCLIENT_FAILED:
     case authpolicy::ERROR_PARSE_FAILED:
     case authpolicy::ERROR_PARSE_PREG_FAILED:
     case authpolicy::ERROR_BAD_GPOS:
     case authpolicy::ERROR_LOCAL_IO:
+    case authpolicy::ERROR_STORE_POLICY_FAILED:
+      ShowError(IDS_AD_DOMAIN_JOIN_UNKNOWN_ERROR, true);
+      return;
+    case authpolicy::ERROR_NETWORK_PROBLEM:
+      ShowError(IDS_ENTERPRISE_ENROLLMENT_AUTH_NETWORK_ERROR, true);
+      return;
+    case authpolicy::ERROR_PARSE_UPN_FAILED:
+    case authpolicy::ERROR_BAD_USER_NAME:
+      CallJS("invalidateAd", machine_name, user_name,
+             static_cast<int>(ERROR_STATE_BAD_USERNAME));
+      return;
+    case authpolicy::ERROR_BAD_PASSWORD:
+      CallJS("invalidateAd", machine_name, user_name,
+             static_cast<int>(ERROR_STATE_BAD_PASSWORD));
+      return;
+    case authpolicy::ERROR_MACHINE_NAME_TOO_LONG:
+      CallJS("invalidateAd", machine_name, user_name,
+             static_cast<int>(ERROR_STATE_MACHINE_NAME_TOO_LONG));
+      return;
+    case authpolicy::ERROR_BAD_MACHINE_NAME:
+      CallJS("invalidateAd", machine_name, user_name,
+             static_cast<int>(ERROR_STATE_MACHINE_NAME_INVALID));
+      return;
+    case authpolicy::ERROR_JOIN_ACCESS_DENIED:
+      ShowError(IDS_AD_USER_DENIED_TO_JOIN_MACHINE, true);
+      return;
+    case authpolicy::ERROR_USER_HIT_JOIN_QUOTA:
+      ShowError(IDS_AD_USER_HIT_JOIN_QUOTA, true);
+      return;
+    case authpolicy::ERROR_PASSWORD_EXPIRED:
+    case authpolicy::ERROR_CANNOT_RESOLVE_KDC:
+    case authpolicy::ERROR_KINIT_FAILED:
     case authpolicy::ERROR_NOT_JOINED:
     case authpolicy::ERROR_NOT_LOGGED_IN:
-    case authpolicy::ERROR_STORE_POLICY_FAILED:
-      // TODO(rsorokin): Add passing/displaying error codes. (see
-      // crbug.com/659984)
-      CallJS("invalidateAd", machine_name, user_name);
-      return;
     default:
       LOG(WARNING) << "Unhandled error code: " << code;
-      CallJS("invalidateAd", machine_name, user_name);
+      CallJS("invalidateAd", machine_name, user_name,
+             static_cast<int>(ERROR_STATE_NONE));
       return;
   }
 }
 
 void EnrollmentScreenHandler::HandleRetry() {
   DCHECK(controller_);
   controller_->OnRetry();
 }
 
 void EnrollmentScreenHandler::HandleFrameLoadingCompleted() {
@@ skipping 52 matching lines @@
 
   ShowScreenWithData(OobeScreen::SCREEN_OOBE_ENROLLMENT, &screen_data);
   if (first_show_) {
     first_show_ = false;
     UpdateStateInternal(NetworkError::ERROR_REASON_UPDATE, true);
   }
   histogram_helper_->OnScreenShow();
 }
 
 }  // namespace chromeos