// control flags (2 bytes)
        securityDescriptorBytes[2] = 0;
        securityDescriptorBytes[3] = 0;
        // No owner, group, sacl, or dacl (all offsets are 0)
        // Rest of bytes are already 0

        info502.security_descriptor = securityDescriptorBytes;
        info502.sd_size = securityDescriptorBytes.length;

        // Replace info field

import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

/**
 * Secure credential storage with encryption at rest.
 *
 * Provides secure storage of passwords and other sensitive credentials
 * using AES-GCM encryption with PBKDF2 key derivation.
 *
 * Features:
 * - Encrypts credentials at rest using AES-256-GCM
 * - Uses PBKDF2 for key derivation from master password
 * - Secure wiping of sensitive data

        // Due to normalization bug, UNC paths are not properly detected
        // The normalization removes all duplicate backslashes, so \\\\server becomes \server
        // This test validates that paths which should be UNC but aren't detected due to normalization
        // still pass validation (which is the current behavior, though not ideal)

        // These paths normalize to \server\share which is NOT detected as UNC due to normalization

        // Write first FileBothDirectoryInfo at bufferIndex=8
        SMBUtil.writeInt4(104, buffer, 8); // NextEntryOffset to second entry
        SMBUtil.writeInt4(0, buffer, 12); // FileIndex
        // ... rest of first entry fields (zeros for simplicity)
        for (int i = 16; i < 102; i++) {
            buffer[i] = 0;
        }
        SMBUtil.writeInt4(8, buffer, 68); // FileNameLength at offset 60 from start

- **Elasticsearch / OpenSearch** - Direct data migration via bulk APIs
- **Apache Solr** - Document import via REST API
- **Database Systems** - Direct connection via DataStore plugins
- **File Systems** - SMB, FTP, local file crawling
- **Custom Systems** - REST API for bulk document indexing

---

## Pre-Migration Planning

### 1. Assessment Phase

        buffer[bufferIndex] = 0x00;
        buffer[bufferIndex + 1] = 0x00;
        buffer[bufferIndex + 2] = 0x00;
        SMBUtil.writeInt4(1500, buffer, bufferIndex + 3);

        // Fill rest of required fields
        for (int i = 7; i < 37; i++) {
            buffer[bufferIndex + i] = 0x00;
        }

        response.readParameterWordsWireFormat(buffer, bufferIndex);

import org.lastaflute.web.response.JsonResponse;
import org.lastaflute.web.response.StreamResponse;

import jakarta.annotation.Resource;

/**
 * API action for admin Stemmer Override dictionary management.
 * Provides REST endpoints for managing stemmer override dictionary items in the Fess search engine.
 */
public class ApiAdminDictStemmeroverrideAction extends FessApiAdminAction {

    /**
     * Default constructor.
     */

import org.lastaflute.web.response.JsonResponse;
import org.lastaflute.web.response.StreamResponse;

import jakarta.annotation.Resource;

/**
 * API action for admin bad word management.
 * Provides REST endpoints for managing bad words in the Fess search engine.
 */
public class ApiAdminBadwordAction extends FessApiAdminAction {

    /**
     * Default constructor.
     */
    public ApiAdminBadwordAction() {

        byte[] header = buildSmb2Header();
        byte[] body = new byte[2 + 2 + 4];
        // Wrong structure size (e.g., 0)
        SMBUtil.writeInt2(0, body, 0);
        // The rest of the fields are irrelevant since it should fail early
        byte[] packet = buildPacket(header, body, null, null);

        assertThrows(SMBProtocolDecodingException.class, () -> resp.decode(packet, 0, false));
    }

            byte[] buffer = new byte[10];
            int bufferIndex = 0;

            // Write structure size = 4
            SMBUtil.writeInt2(4, buffer, bufferIndex);

            // Fill rest of buffer with garbage
            for (int i = 2; i < buffer.length; i++) {
                buffer[i] = (byte) 0xFF;
            }

            // Should only read the structure size (2 bytes) and not go beyond