We could not find objguid. The problem is "net ads search" by user principal name (UPN) returns nothing. Because administrator does not have it in our setup. I guess we should try different searches: by UPN, by samaccount, by name?

Windows logon and kinit prefer a sAMAccountName, probably for backwards compatibility. UPN is only optional. Change authpolicy to prefer sAMAccountName as well.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/platform2/+/6d006a0b3c23fa5dc033f01d13f3c4c1bade2556

commit 6d006a0b3c23fa5dc033f01d13f3c4c1bade2556
Author: Lutz Justen <ljusten@chromium.org>
Date: Thu Jan 12 14:15:48 2017

authpolicy: Prefer sAMAccountName for objectGUID search

Use sAMAccountName for searching for the objectGUID/account id and
fall back to userPrincipalName. This is what Windows and kinit seem
to do, i.e. if you kinit name@realm.com, it assumes that name is a
sAMAccountName first and only if there is no such sAMAccountName,
it assumes it's a UPN.

BUG= chromium:680454 
TEST=Emerges, tested both cases with and without fallback.

Change-Id: Ic05f8b46e8f33b04c21a8d722ab6db27b007b31c
Reviewed-on: https://chromium-review.googlesource.com/427680
Commit-Ready: Lutz Justen <ljusten@chromium.org>
Tested-by: Lutz Justen <ljusten@chromium.org>
Reviewed-by: Roman Sorokin <rsorokin@chromium.org>

[modify] https://crrev.com/6d006a0b3c23fa5dc033f01d13f3c4c1bade2556/authpolicy/samba_interface.cc

bulk Verify of older or not-user-facing Chromad bugs