// initialization.

			// Generate role ARN as combination of provider domain and
			// prefix of client ID.
			domain := configURLDomain
			if domain == "" {
				// Attempt to parse the JWKs URI.
				domain = p.JWKS.URL.Hostname()
				if domain == "" {
					return c, config.Errorf("unable to parse a domain from the OpenID config")
				}
			}
			if p.ClientID == "" {

    /**
     * Get the server this referral points to
     *
     * @return the server this referral points to
     */
    String getServer();

    /**
     * Get the domain this referral is for
     *
     * @return the domain this referral is for
     */
    String getDomain();

    /**
     * Get the share this referral points to
     *
     * @return the share this referral points to
     */

For a [distributed MinIO setup](https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html), where there are multiple pods with different domain names expected to run, you will either need wildcard certificates valid for all the domains or have specific certificates for each domain. If you are going to use specific certificates, make sure to create Kubernetes secrets accordingly.

		[size_is(num_sids)] LsarSidPtr *sids;
	} LsarSidArray;

	typedef enum {
		SID_NAME_USE_NONE = 0, /* NOTUSED */
		SID_NAME_USER     = 1, /* user */
		SID_NAME_DOM_GRP  = 2, /* domain group */
		SID_NAME_DOMAIN   = 3, /* domain: don't know what this is */
		SID_NAME_ALIAS    = 4, /* local group */
		SID_NAME_WKN_GRP  = 5, /* well-known group */
		SID_NAME_DELETED  = 6, /* deleted account: needed for c2 rating */

		[size_is(num_sids)] LsarSidPtr *sids;
	} LsarSidArray;

	typedef enum {
		SID_NAME_USE_NONE = 0, /* NOTUSED */
		SID_NAME_USER     = 1, /* user */
		SID_NAME_DOM_GRP  = 2, /* domain group */
		SID_NAME_DOMAIN   = 3, /* domain: don't know what this is */
		SID_NAME_ALIAS    = 4, /* local group */
		SID_NAME_WKN_GRP  = 5, /* well-known group */
		SID_NAME_DELETED  = 6, /* deleted account: needed for c2 rating */

        Vector<String> paramNames = new Vector<>();
        paramNames.add("jcifs.smb.client.domain");
        paramNames.add("jcifs.http.enableBasic");
        paramNames.add("someOtherParam");

        lenient().when(servletConfig.getInitParameterNames()).thenReturn(paramNames.elements());
        lenient().when(servletConfig.getInitParameter("jcifs.smb.client.domain")).thenReturn("TESTDOMAIN");

/**
 * Integration tests for lsarpc classes using real NdrBuffer implementations
 */
class lsarpcIntegrationTest {

    @Test
    void testLsarDomainInfoEncodeDecodeRoundTrip() throws NdrException {
        // Create a domain info with test data
        lsarpc.LsarDomainInfo domainInfo = new lsarpc.LsarDomainInfo();
        domainInfo.name = new rpc.unicode_string();
        domainInfo.name.length = 10;
        domainInfo.name.maximum_length = 20;

                    || $license.url.contains( "opensource.org/licenses/BSD-3-Clause" ) )
#*      *##set ( $spdx = 'BSD-3-Clause' )
#*    *##elseif ( $license.name == "Public Domain" )
#*      *##set ( $spdx = 'Public-Domain' )
#*    *##elseif ( $license.name == "CDDL + GPLv2 with classpath exception" )
#*      *##set ( $spdx = 'CDDL+GPLv2-with-classpath-exception' )
#*    *##else

import jcifs.internal.util.SMBUtil;

/**
 * SMB1 Session Setup AndX Response message.
 *
 * This response contains information about the established session,
 * including native OS, LAN manager, and primary domain information.
 */
public class SmbComSessionSetupAndXResponse extends AndXServerMessageBlock {

    private String nativeOs = "";
    private String nativeLanMan = "";
    private String primaryDomain = "";

        // Set server timezone (in minutes) and domain
        nego.getServerData().serverTimeZone = 60; // 60 minutes
        nego.getServerData().oemDomainName = "DOMAIN";

        when(transport.getNegotiateResponse()).thenReturn(nego);

        assertEquals(60L * 1000L * 60L, handle.getServerTimeZoneOffset());
        assertEquals("DOMAIN", handle.getOEMDomainName());
        verify(session, times(2)).close();