@DisplayName("getUserDomain: explicit realm overrides")
        void getUserDomain_fromExplicitRealm() {
            Kerb5Authenticator auth = new Kerb5Authenticator(new Subject());
            auth.setRealm("REALM.TEST");
            assertEquals("REALM.TEST", auth.getUserDomain());
        }

        @Test
        @DisplayName("getUserDomain: falls back to super domain when no realm/subject")

    val headers =
      Headers
        .Builder()
        .add("WWW-Authenticate", "Basic realm = \"myrealm\",Basic realm=myotherrealm")
        .build()
    assertThat(headers.parseChallenges("WWW-Authenticate")).containsExactly(
      Challenge("Basic", mapOf("realm" to "myrealm")),
      Challenge("Basic", mapOf("realm" to "myotherrealm")),
    )
  }

  @Test fun separatorsBeforeFirstAuthParam() {
    val headers =

    }

    /**
     * Set the Kerberos realm
     *
     * @param realm
     *            the realm to set
     */
    public void setRealm(String realm) {
        this.realm = realm;
    }

    /**
     * Get the Kerberos realm
     *
     * @return the kerberos realm
     */
    public String getRealm() {
        return this.realm;
    }

    /**

        enableBasic = Config.getBoolean("jcifs.smb1.http.enableBasic", false);
        insecureBasic = Config.getBoolean("jcifs.smb1.http.insecureBasic", false);
        realm = Config.getProperty("jcifs.smb1.http.basicRealm");
        if (realm == null) {
            realm = "jCIFS";
        }
        defaultDomain = Config.getProperty("jcifs.smb1.smb.client.domain");

        level = Config.getInt("jcifs.smb1.util.loglevel", -1);

        insecureBasic = Boolean.parseBoolean(Config.getProperty("jcifs.smb1.http.insecureBasic"));
        realm = Config.getProperty("jcifs.smb1.http.basicRealm");
        if (realm == null) {
            realm = "jCIFS";
        }

        level = Config.getInt("jcifs.smb1.util.loglevel", -1);
        if (level != -1) {
            LogStream.setLevel(level);
        }

        final String hostname = paramMap.get(CRAWLER_WEB_AUTH + "." + webAuthName + ".host");
        final String port = paramMap.get(CRAWLER_WEB_AUTH + "." + webAuthName + ".port");
        final String realm = paramMap.get(CRAWLER_WEB_AUTH + "." + webAuthName + ".realm");
        AuthScope authScope;
        if (StringUtil.isBlank(hostname)) {
            authScope = AuthScope.ANY;
        } else {
            int p = AuthScope.ANY_PORT;

            this.realm = p.getProperty("jcifs.http.basicRealm");
            this.netbiosLookupRespLimit = Config.getInt(p, "jcifs.netbios.lookupRespLimit", 3);
            this.netbiosCacheTimeout = Config.getInt(p, "jcifs.netbios.cachePolicy", 60 * 10) * 60; /* 10 hours */

            if (this.realm == null) {
                this.realm = "jCIFS";
            }

        insecureBasicField.set(explorer, enableBasic);

        java.lang.reflect.Field realmField = NetworkExplorer.class.getDeclaredField("realm");
        realmField.setAccessible(true);
        realmField.set(explorer, realm);

        java.lang.reflect.Field defaultDomainField = NetworkExplorer.class.getDeclaredField("defaultDomain");
        defaultDomainField.setAccessible(true);

            this.insecureBasic = Config.getBoolean(p, "jcifs.http.insecureBasic", false);
            this.realm = p.getProperty("jcifs.http.basicRealm");
            if (this.realm == null) {
                this.realm = "jCIFS";
            }
            this.defaultDomain = p.getProperty("jcifs.smb.client.domain");

        keys = new KerberosKey[] { kerberosKey };
    }

    /**
     * Creates a byte array representing a Kerberos ticket for testing purposes.
     * @param version Kerberos version
     * @param realm Server realm
     * @param principalName Server principal name
     * @param encType Encryption type
     * @param encryptedData Encrypted data
     * @param unknownTag Optional unknown tag number to test error handling