verify(transport).ensureConnected();
    }

    // Happy path: getDfsReferrals returns referral, verify arguments captured
    @Test
    @DisplayName("getDfsReferrals returns data and receives correct args")
    void getDfsReferrals_happy() throws Exception {
        when(transport.getDfsReferrals(any(), any(), any(), any(), anyInt())).thenReturn(referral);

            final SmbTransport trans = SmbTransport.getSmbTransport(addr, 0);
            final CacheEntry entry = new CacheEntry(Dfs.TTL * 10L);

            DfsReferral dr = trans.getDfsReferrals(auth, "", 0);
            if (dr != null) {
                final DfsReferral start = dr;
                do {
                    final String domain = dr.server.toLowerCase();

        case NtStatus.NT_STATUS_PATH_NOT_COVERED:
            if (req.auth == null) {
                throw new SmbException(resp.errorCode, null);
            }

            final DfsReferral dr = getDfsReferrals(req.auth, req.path, 1);
            if (dr == null) {
                throw new SmbException(resp.errorCode, null);
            }

            SmbFile.dfs.insert(req.path, dr);
            throw dr;

                final SmbTransportInternal trans = dc != null ? dc.unwrap(SmbTransportInternal.class) : null;
                if (trans != null) {
                    // get domain referral
                    initial = trans.getDfsReferrals(tf.withAnonymousCredentials(), "", trans.getRemoteHostName(), authDomain, 0);
                }
                if (initial != null) {

    }

    @Test
    @DisplayName("DFS referrals: invalid double-slash prefix triggers exception")
    void dfsReferrals_invalidPath() {
        CIFSException ex = assertThrows(CIFSException.class, () -> transport.getDfsReferrals(ctx, "\\\\server\\share", null, null, 1));
        assertTrue(ex.getMessage().contains("double slash"));
    }

    @Nested
    @MockitoSettings(strictness = Strictness.LENIENT)