// Assert
        assertNotSame(creds, copy, "clone must return a new instance");
        assertEquals(creds.getUserDomain(), copy.getUserDomain());
        assertEquals(creds.isAnonymous(), copy.isAnonymous());
        assertEquals(creds.isGuest(), copy.isGuest());
        assertSame(subject, copy.getSubject(), "subject is the same reference in clone");
    }

    @Test

        this.contextLifetime = time;
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.smb.CredentialsInternal#isAnonymous()
     */
    @Override
    public boolean isAnonymous() {
        return this.getSubject() == null && super.isAnonymous();
    }

    /**
     * {@inheritDoc}
     *

        assertTrue(guestAuth.isGuest());
        assertFalse(guestAuth.isAnonymous());

        // Test anonymous detection
        NtlmPasswordAuthenticator anonAuth = new NtlmPasswordAuthenticator("", new char[0]);
        assertTrue(anonAuth.isAnonymous());
        assertFalse(anonAuth.isGuest());

        // Test user authentication

        // Different type -> false
        assertFalse(a.equals("not-an-auth"));
    }

    @Test
    @DisplayName("isAnonymous: depends on subject presence and super")
    void isAnonymous_behaviour() {
        Kerb5Authenticator anon = new Kerb5Authenticator((Subject) null);
        assertTrue(anon.isAnonymous(), "Null subject with default super should be anonymous");

            return new JAASAuthenticator();
        }
    }

    @Test
    @DisplayName("isAnonymous and isGuest are always false")
    void testIsAnonymousAndGuestFalse() {
        JAASAuthenticator auth = new JAASAuthenticator();
        // JAAS-based authenticator should never be anonymous or guest
        assertFalse(auth.isAnonymous());
        assertFalse(auth.isGuest());
    }

    @ParameterizedTest

    }

    @Test
    @DisplayName("shouldForceSigning depends on config, creds, and IPC")
    void testShouldForceSigning() {
        when(config.isIpcSigningEnforced()).thenReturn(true);
        when(creds.isAnonymous()).thenReturn(false);

        // Case 1: share is IPC$ -> IPC
        SmbResourceLocatorImpl ipc = locator("smb://server/IPC$/");
        assertTrue(ipc.shouldForceSigning());

        // Case 2: config disabled

        this.ntlmsspFlags = this.ntlmsspFlags | NtlmFlags.NTLMSSP_REQUEST_TARGET | NtlmFlags.NTLMSSP_NEGOTIATE_EXTENDED_SESSIONSECURITY
                | NtlmFlags.NTLMSSP_NEGOTIATE_128;
        if (!auth.isAnonymous()) {
            this.ntlmsspFlags |=
                    NtlmFlags.NTLMSSP_NEGOTIATE_SIGN | NtlmFlags.NTLMSSP_NEGOTIATE_ALWAYS_SIGN | NtlmFlags.NTLMSSP_NEGOTIATE_KEY_EXCH;
        } else if (auth.isGuest()) {

        }

        if (transport.getContext().getConfig().isIpcSigningEnforced() && ("IPC$".equals(this.getShare()) || "IPC".equals(rsvc))
                && !sess.getCredentials().isAnonymous() && sess.getDigest() == null) {
            throw new SmbException("IPC signing is enforced, but no signing is available");
        }

        this.service = rsvc;
        this.inDfs = response.isShareDfs();

        try (SmbTransportInternal trans = tf.getTransportPool()
                .getSmbTransport(tf, dc, port, false, !tf.getCredentials().isAnonymous() && tf.getConfig().isIpcSigningEnforced())
                .unwrap(SmbTransportInternal.class)) {
            trans.ensureConnected();
            return trans.getServerEncryptionKey();

            final SmbTreeImpl t, final DfsReferralData referral, final SmbAuthException sae) throws SmbAuthException, CIFSException {
        try (SmbSessionImpl treesess = t.getSession()) {
            if (treesess.getCredentials().isAnonymous() || treesess.getCredentials().isGuest()) {
                // refresh anonymous session or fallback to anonymous from guest login
                try (SmbSessionInternal s =