OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/chromeos/login/managed/managed_user_creation_controller
_new.h" | 5 #include "chrome/browser/chromeos/login/managed/managed_user_creation_controller
_new.h" |
6 | 6 |
7 #include "base/base64.h" | 7 #include "base/base64.h" |
8 #include "base/bind.h" | 8 #include "base/bind.h" |
9 #include "base/file_util.h" | 9 #include "base/file_util.h" |
10 #include "base/files/file_path.h" | 10 #include "base/files/file_path.h" |
(...skipping 27 matching lines...) Expand all Loading... |
38 namespace { | 38 namespace { |
39 | 39 |
40 const int kUserCreationTimeoutSeconds = 30; // 30 seconds. | 40 const int kUserCreationTimeoutSeconds = 30; // 30 seconds. |
41 | 41 |
42 bool StoreManagedUserFiles(const std::string& token, | 42 bool StoreManagedUserFiles(const std::string& token, |
43 const base::FilePath& base_path) { | 43 const base::FilePath& base_path) { |
44 if (!base::SysInfo::IsRunningOnChromeOS()) { | 44 if (!base::SysInfo::IsRunningOnChromeOS()) { |
45 // If running on desktop, cryptohome stub does not create home directory. | 45 // If running on desktop, cryptohome stub does not create home directory. |
46 base::CreateDirectory(base_path); | 46 base::CreateDirectory(base_path); |
47 } | 47 } |
48 base::FilePath token_file = base_path.Append(kManagedUserTokenFilename); | 48 base::FilePath token_file = base_path.Append(kSupervisedUserTokenFilename); |
49 int bytes = base::WriteFile(token_file, token.c_str(), token.length()); | 49 int bytes = base::WriteFile(token_file, token.c_str(), token.length()); |
50 return bytes >= 0; | 50 return bytes >= 0; |
51 } | 51 } |
52 | 52 |
53 } // namespace | 53 } // namespace |
54 | 54 |
55 ManagedUserCreationControllerNew::ManagedUserCreationControllerNew( | 55 ManagedUserCreationControllerNew::ManagedUserCreationControllerNew( |
56 ManagedUserCreationControllerNew::StatusConsumer* consumer, | 56 ManagedUserCreationControllerNew::StatusConsumer* consumer, |
57 const std::string& manager_id) | 57 const std::string& manager_id) |
58 : ManagedUserCreationController(consumer), | 58 : ManagedUserCreationController(consumer), |
(...skipping 86 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
145 VLOG(1) << "Starting supervised user creation"; | 145 VLOG(1) << "Starting supervised user creation"; |
146 VLOG(1) << " Phase 1 : Prepare keys"; | 146 VLOG(1) << " Phase 1 : Prepare keys"; |
147 | 147 |
148 SupervisedUserManager* manager = | 148 SupervisedUserManager* manager = |
149 UserManager::Get()->GetSupervisedUserManager(); | 149 UserManager::Get()->GetSupervisedUserManager(); |
150 manager->StartCreationTransaction(creation_context_->display_name); | 150 manager->StartCreationTransaction(creation_context_->display_name); |
151 | 151 |
152 creation_context_->local_user_id = manager->GenerateUserId(); | 152 creation_context_->local_user_id = manager->GenerateUserId(); |
153 if (creation_context_->creation_type == NEW_USER) { | 153 if (creation_context_->creation_type == NEW_USER) { |
154 creation_context_->sync_user_id = | 154 creation_context_->sync_user_id = |
155 ManagedUserRegistrationUtility::GenerateNewManagedUserId(); | 155 SupervisedUserRegistrationUtility::GenerateNewSupervisedUserId(); |
156 } | 156 } |
157 | 157 |
158 manager->SetCreationTransactionUserId(creation_context_->local_user_id); | 158 manager->SetCreationTransactionUserId(creation_context_->local_user_id); |
159 | 159 |
160 stage_ = TRANSACTION_STARTED; | 160 stage_ = TRANSACTION_STARTED; |
161 | 161 |
162 manager->CreateUserRecord(creation_context_->manager_id, | 162 manager->CreateUserRecord(creation_context_->manager_id, |
163 creation_context_->local_user_id, | 163 creation_context_->local_user_id, |
164 creation_context_->sync_user_id, | 164 creation_context_->sync_user_id, |
165 creation_context_->display_name); | 165 creation_context_->display_name); |
(...skipping 90 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
256 void ManagedUserCreationControllerNew::OnMountSuccess( | 256 void ManagedUserCreationControllerNew::OnMountSuccess( |
257 const std::string& mount_hash) { | 257 const std::string& mount_hash) { |
258 DCHECK(creation_context_); | 258 DCHECK(creation_context_); |
259 DCHECK_EQ(KEYS_GENERATED, stage_); | 259 DCHECK_EQ(KEYS_GENERATED, stage_); |
260 VLOG(1) << " Phase 2.2 : Created home dir with master key"; | 260 VLOG(1) << " Phase 2.2 : Created home dir with master key"; |
261 | 261 |
262 creation_context_->mount_hash = mount_hash; | 262 creation_context_->mount_hash = mount_hash; |
263 | 263 |
264 // Plain text password, hashed and salted with individual salt. | 264 // Plain text password, hashed and salted with individual salt. |
265 // It can be used for mounting homedir, and can be replaced only when signed. | 265 // It can be used for mounting homedir, and can be replaced only when signed. |
266 cryptohome::KeyDefinition password_key(creation_context_->salted_password, | 266 cryptohome::KeyDefinition password_key( |
267 kCryptohomeManagedUserKeyLabel, | 267 creation_context_->salted_password, |
268 kCryptohomeManagedUserKeyPrivileges); | 268 kCryptohomeSupervisedUserKeyLabel, |
| 269 kCryptohomeSupervisedUserKeyPrivileges); |
269 base::Base64Decode(creation_context_->encryption_key, | 270 base::Base64Decode(creation_context_->encryption_key, |
270 &password_key.encryption_key); | 271 &password_key.encryption_key); |
271 base::Base64Decode(creation_context_->signature_key, | 272 base::Base64Decode(creation_context_->signature_key, |
272 &password_key.signature_key); | 273 &password_key.signature_key); |
273 | 274 |
274 Key key(Key::KEY_TYPE_SALTED_PBKDF2_AES256_1234, | 275 Key key(Key::KEY_TYPE_SALTED_PBKDF2_AES256_1234, |
275 std::string(), // The salt is stored elsewhere. | 276 std::string(), // The salt is stored elsewhere. |
276 creation_context_->salted_master_key); | 277 creation_context_->salted_master_key); |
277 key.SetLabel(kCryptohomeMasterKeyLabel); | 278 key.SetLabel(kCryptohomeMasterKeyLabel); |
278 UserContext context(creation_context_->local_user_id); | 279 UserContext context(creation_context_->local_user_id); |
(...skipping 18 matching lines...) Expand all Loading... |
297 ProfileSyncService* sync_service = | 298 ProfileSyncService* sync_service = |
298 ProfileSyncServiceFactory::GetInstance()->GetForProfile( | 299 ProfileSyncServiceFactory::GetInstance()->GetForProfile( |
299 creation_context_->manager_profile); | 300 creation_context_->manager_profile); |
300 ProfileSyncService::SyncStatusSummary status = | 301 ProfileSyncService::SyncStatusSummary status = |
301 sync_service->QuerySyncStatusSummary(); | 302 sync_service->QuerySyncStatusSummary(); |
302 | 303 |
303 if (status == ProfileSyncService::DATATYPES_NOT_INITIALIZED) | 304 if (status == ProfileSyncService::DATATYPES_NOT_INITIALIZED) |
304 consumer_->OnLongCreationWarning(); | 305 consumer_->OnLongCreationWarning(); |
305 | 306 |
306 creation_context_->registration_utility = | 307 creation_context_->registration_utility = |
307 ManagedUserRegistrationUtility::Create( | 308 SupervisedUserRegistrationUtility::Create( |
308 creation_context_->manager_profile); | 309 creation_context_->manager_profile); |
309 | 310 |
310 ManagedUserRegistrationInfo info(creation_context_->display_name, | 311 SupervisedUserRegistrationInfo info(creation_context_->display_name, |
311 creation_context_->avatar_index); | 312 creation_context_->avatar_index); |
312 info.master_key = creation_context_->master_key; | 313 info.master_key = creation_context_->master_key; |
313 info.password_signature_key = creation_context_->signature_key; | 314 info.password_signature_key = creation_context_->signature_key; |
314 info.password_encryption_key = creation_context_->encryption_key; | 315 info.password_encryption_key = creation_context_->encryption_key; |
315 | 316 |
316 info.password_data.MergeDictionary(&creation_context_->password_data); | 317 info.password_data.MergeDictionary(&creation_context_->password_data); |
317 | 318 |
318 // Registration utility will update user data if user already exist. | 319 // Registration utility will update user data if user already exist. |
319 creation_context_->registration_utility->Register( | 320 creation_context_->registration_utility->Register( |
320 creation_context_->sync_user_id, | 321 creation_context_->sync_user_id, |
321 info, | 322 info, |
(...skipping 70 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
392 creation_context_->registration_utility.reset(); | 393 creation_context_->registration_utility.reset(); |
393 chrome::AttemptUserExit(); | 394 chrome::AttemptUserExit(); |
394 } | 395 } |
395 | 396 |
396 std::string ManagedUserCreationControllerNew::GetManagedUserId() { | 397 std::string ManagedUserCreationControllerNew::GetManagedUserId() { |
397 DCHECK(creation_context_); | 398 DCHECK(creation_context_); |
398 return creation_context_->local_user_id; | 399 return creation_context_->local_user_id; |
399 } | 400 } |
400 | 401 |
401 } // namespace chromeos | 402 } // namespace chromeos |
OLD | NEW |