final String domain = paramMap.get(CRAWLER_WEB_AUTH + "." + webAuthName + ".domain");
            credentials = new NTCredentials(username, password == null ? StringUtil.EMPTY : password,
                    workstation == null ? StringUtil.EMPTY : workstation, domain == null ? StringUtil.EMPTY : domain);
        } else {

    /** No more connections can be made to this remote computer */
    int NT_STATUS_REQUEST_NOT_ACCEPTED = 0xC00000d0;
    /** Indicates a domain controller could not be contacted or objects are protected */
    int NT_STATUS_CANT_ACCESS_DOMAIN_INFO = 0xC00000da;
    /** The specified domain does not exist */
    int NT_STATUS_NO_SUCH_DOMAIN = 0xC00000df;
    /** The directory name is invalid */

    private String authMethod;

    private boolean handshakeComplete;

    static {
        String domain = System.getProperty("http.auth.ntlm.domain");
        if (domain == null) {
            domain = Type3Message.getDefaultDomain();
        }
        DEFAULT_DOMAIN = domain;
    }

    /**
     * Creates a new NTLM HTTP URL connection that wraps an existing HTTP connection.
     *

     * Retrieves an NTLM challenge from a domain controller for the configured domain.
     *
     * @return the NTLM challenge from the domain controller
     * @throws SmbException if an SMB error occurs
     * @throws UnknownHostException if the domain controller cannot be resolved
     */
    public static NtlmChallenge getChallengeForDomain() throws SmbException, UnknownHostException {
        if (DOMAIN == null) {

     *            the configuration to use
     * @param domain
     *            the domain to enumerate servers in
     * @param serverTypes
     *            the types of servers to enumerate
     */
    public NetServerEnum2(final Configuration config, final String domain, final int serverTypes) {
        super(config, SMB_COM_TRANSACTION, NET_SERVER_ENUM2);
        this.domain = domain;
        this.serverTypes = serverTypes;

    }

    /**
     * Generates a Type 1 NTLM message.
     *
     * @param domain the domain name
     * @param workstation the workstation name
     * @return the Base64-encoded Type 1 message
     * @throws NTLMEngineException if an NTLM engine error occurs
     */
    @Override
    public String generateType1Msg(final String domain, final String workstation) throws NTLMEngineException {

For a [distributed MinIO setup](https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html), where there are multiple pods with different domain names expected to run, you will either need wildcard certificates valid for all the domains or have specific certificates for each domain. If you are going to use specific certificates, make sure to create Kubernetes secrets accordingly.

        public LsarTrustInformation[] domains;
        /** Maximum count of domains. */
        public int max_count;

        @Override
        public void encode(NdrBuffer _dst) throws NdrException {
            _dst.align(4);
            _dst.enc_ndr_long(count);
            _dst.enc_ndr_referent(domains, 1);
            _dst.enc_ndr_long(max_count);

            if (domains != null) {

            // Compute Resource Group IDs with Resource Domain ID to get SIDs
            this.resourceGroupSids = new SID[resourceGroups.length];
            for (int i = 0; i < resourceGroups.length; i++) {
                this.resourceGroupSids[i] = new SID(resourceDomainId, resourceGroups[i].getId());
            }

            // Compute User IDs with Domain ID to get User SIDs
            // First extra is user if userId is empty

                final Map<String, String> map = ParameterUtil.parse(fileAuth.getParameters());
                final String domain = map.get("domain");
                smbAuth.setDomain(domain == null ? StringUtil.EMPTY : domain);
                smbAuth.setServer(fileAuth.getHostname());
                smbAuth.setPort(fileAuth.getPort() == null ? -1 : fileAuth.getPort());