Domain name source when doing NTLM authentication

When doing NTLM authentication, the domain is extracted based on the following:

1. If the domain controller has a domain name configured, it is used.

2. Otherwise, if the NTLM type 3 message, from the user, is configured, it is used.

3. Otherwise, if the domain name from the NTLM type 2 message, from the DC, is configured, it is used.

To configure the domain name source, if it is not set:

config user domain-controller
    edit "adfs-dc"
        set ip-address 192.168.130.200
        unset domain-name
        set domain-name-src {server | client}
        set ldap-server "adfsldap"
    next
end

The domain name can be extracted from either the server's (DC) data, or from the client's data.