Policies for HTTP authentication

AuthSchemes Yes
	- "basic,digest,ntlm,negotiate"

DisableAuthNegotiateCnameLookup Yes
	- Disable CNAME lookup when negotiating Kerberos authentication
	- Enable skips CNAME lookup and the server name will be used as entered
	- Disable/not set: the canonical name of the server will be determined via CNAME lookup.

EnableAuthNegotiatePort Yes
	- Enable and set port != 80,443: port will be included in the generated Kerberos SPN.

AuthServerWhitelist Yes
	- Whitelists auth servers (extranet only, intranet is automatically whitelisted)

AuthNegotiateDelegateWhitelist Yes?
	- Servers that Google Chrome may delegate to.
	- If not set, Chrome won't delegate, even if server is on intranet.

GSSAPILibraryName	NO (user cannot install library on Chrome OS)
	- E.g. "libgssapi_krb5.so.2"

AuthAndroidNegotiateAccountType NO
	- Account type for HTTP Negotiate authentication
	- (Android only)

Cross-origin HTTP Basic Auth prompts Yes
	- Controls whether third-party sub-content on a page is allowed to pop-up an HTTP Basic Auth dialog box.
	- Typically disabled as a phishing defense.

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/c3fed026b3475f896673dfa1aa40040a19010f27

commit c3fed026b3475f896673dfa1aa40040a19010f27
Author: Lutz Justen <ljusten@chromium.org>
Date: Fri Aug 18 08:00:53 2017

Support HTTP authentication policies on ChromeOS

The policies are needed on Active Directory managed devices in order
to configure Kerberos authentication through GSSAPI.

The first use case will be the SAML flow during ARC account
provisioning, where the Device Management server asks AD FS
to authenticate the user. Right now the user has to enter
their credentials. With Kerberos auth, we'll pass through
the Kerberos ticket, so that auth goes seamlessly.

BUG= chromium:737544 
TEST=Compiles. Actual testing requires Chrome OS changes that
     depend on this CL, will be done when CL is available.

Change-Id: Id0a541fa610975e6c03a7b5dba63a7653cb48bf3
Reviewed-on: https://chromium-review.googlesource.com/610228
Commit-Queue: Lutz Justen <ljusten@chromium.org>
Reviewed-by: Drew Wilson <atwilson@chromium.org>
Cr-Commit-Position: refs/heads/master@{#495500}
[modify] https://crrev.com/c3fed026b3475f896673dfa1aa40040a19010f27/components/policy/resources/policy_templates.json

The following revision refers to this bug:
  https://chromium.googlesource.com/chromiumos/overlays/chromiumos-overlay/+/2cce6e8212f42d062f90a922771fff9978acd022

commit 2cce6e8212f42d062f90a922771fff9978acd022
Author: Lutz Justen <ljusten@chromium.org>
Date: Thu Aug 31 09:37:07 2017

Uprev protofiles and VERSION to Chromium 62.0.3190

This picks up the following changes:

Changes for components/policy.git
(https://chromium.googlesource.com/chromium/src/components/policy)
cec93af Lutz Justen         Support HTTP authentication policies on Ch..
b75fd6d Owen Min            Add the declaration of policy CloudPolicyO..
4f59629 Yves Arrouye        Set the cast receiver name from the device..
13adb94 Daria Yakovleva     Add new device policy "DeviceOffHours".

Changes for chrome/browser/chromeos/policy/proto.git
(https://chromium.googlesource.com/chromium/src/chrome/browser/chromeos/policy/proto)
aa83324 Daria Yakovleva     Add new device policy "DeviceOffHours".
c1a3e0c Xiyuan Xia          kiosk: Restore prompt_for_network_when_off..

CQ-DEPEND=CL:621086

BUG= chromium:737544 
TEST=./build_packages --board=amd64-generic && \
     cros_run_unit_tests --board=amd64-generic --packages authpolicy

Change-Id: Ice3007a83a5210640dbdc012d66a906c6a12cbee
Reviewed-on: https://chromium-review.googlesource.com/621007
Commit-Ready: Roman Sorokin <rsorokin@chromium.org>
Tested-by: Lutz Justen <ljusten@chromium.org>
Tested-by: Roman Sorokin <rsorokin@chromium.org>
Reviewed-by: Dan Erat <derat@chromium.org>
Reviewed-by: Roman Sorokin <rsorokin@chromium.org>
Reviewed-by: Xiyuan Xia <xiyuan@chromium.org>

[rename] https://crrev.com/2cce6e8212f42d062f90a922771fff9978acd022/chromeos-base/protofiles/protofiles-0.0.6.ebuild
[modify] https://crrev.com/2cce6e8212f42d062f90a922771fff9978acd022/chromeos-base/protofiles/files/VERSION