Chromad: Allow offline login.

chromeos/dbus/auth_policy_client.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROMEOS_DBUS_AUTH_POLICY_CLIENT_H_
 #define CHROMEOS_DBUS_AUTH_POLICY_CLIENT_H_
 
 #include <string>
 
 #include "base/callback.h"
@@ skipping 31 matching lines @@
   // |password_fd| are credentials of the Active directory account which has
   // right to join the machine to the domain. |password_fd| is a file descriptor
   // password is read from. The caller should close it after the call.
   // |callback| is called after getting (or failing to get) D-BUS response.
   virtual void JoinAdDomain(const std::string& machine_name,
                             const std::string& user_principal_name,
                             int password_fd,
                             JoinCallback callback) = 0;
 
   // Calls AuthenticateUser. It runs "kinit <user_principal_name> .. " which
-  // does kerberos authentication against Active Directory server.
-  // |password_fd| is similar to the one in the JoinAdDomain.
-  // |callback| is called after getting (or failing to get) D-BUS response.
+  // does kerberos authentication against Active Directory server. If
+  // |object_guid| is not empty authpolicy service first does ldap search by
+  // that |object_guid| for samAccountName and uses it for kinit. |password_fd|
+  // is similar to the one in the JoinAdDomain. |callback| is called after
+  // getting (or failing to get) D-BUS response.
   virtual void AuthenticateUser(const std::string& user_principal_name,
+                                const std::string& object_guid,
                                 int password_fd,
                                 AuthCallback callback) = 0;
 
   // Calls RefreshDevicePolicy - handle policy for the device.
   // Fetch GPO files from Active directory server, parse it, encode it into
   // protobuf and send to SessionManager. Callback is called after that.
   virtual void RefreshDevicePolicy(RefreshPolicyCallback callback) = 0;
 
   // Calls RefreshUserPolicy - handle policy for the user specified by
   // |account_id|. Similar to RefreshDevicePolicy.
   virtual void RefreshUserPolicy(const AccountId& account_id,
                                  RefreshPolicyCallback callback) = 0;
 
  protected:
   // Create() should be used instead.
   AuthPolicyClient();
 
  private:
   DISALLOW_COPY_AND_ASSIGN(AuthPolicyClient);
 };
 
 }  // namespace chromeos
 
 #endif  // CHROMEOS_DBUS_AUTH_POLICY_CLIENT_H_