this.contextLifetime = time;
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.smb.CredentialsInternal#isAnonymous()
     */
    @Override
    public boolean isAnonymous() {
        return this.getSubject() == null && super.isAnonymous();
    }

    /**
     * {@inheritDoc}
     *

        assertTrue(guestAuth.isGuest());
        assertFalse(guestAuth.isAnonymous());

        // Test anonymous detection
        NtlmPasswordAuthenticator anonAuth = new NtlmPasswordAuthenticator("", new char[0]);
        assertTrue(anonAuth.isAnonymous());
        assertFalse(anonAuth.isGuest());

        // Test user authentication

        // Assert
        assertNotSame(creds, copy, "clone must return a new instance");
        assertEquals(creds.getUserDomain(), copy.getUserDomain());
        assertEquals(creds.isAnonymous(), copy.isAnonymous());
        assertEquals(creds.isGuest(), copy.isGuest());
        assertSame(subject, copy.getSubject(), "subject is the same reference in clone");
    }

    @Test

        // Different type -> false
        assertFalse(a.equals("not-an-auth"));
    }

    @Test
    @DisplayName("isAnonymous: depends on subject presence and super")
    void isAnonymous_behaviour() {
        Kerb5Authenticator anon = new Kerb5Authenticator((Subject) null);
        assertTrue(anon.isAnonymous(), "Null subject with default super should be anonymous");

            return new JAASAuthenticator();
        }
    }

    @Test
    @DisplayName("isAnonymous and isGuest are always false")
    void testIsAnonymousAndGuestFalse() {
        JAASAuthenticator auth = new JAASAuthenticator();
        // JAAS-based authenticator should never be anonymous or guest
        assertFalse(auth.isAnonymous());
        assertFalse(auth.isGuest());
    }

    @ParameterizedTest

    }

    @Test
    @DisplayName("shouldForceSigning depends on config, creds, and IPC")
    void testShouldForceSigning() {
        when(config.isIpcSigningEnforced()).thenReturn(true);
        when(creds.isAnonymous()).thenReturn(false);

        // Case 1: share is IPC$ -> IPC
        SmbResourceLocatorImpl ipc = locator("smb://server/IPC$/");
        assertTrue(ipc.shouldForceSigning());

        // Case 2: config disabled

     * @see jcifs.smb.SmbResourceLocatorInternal#shouldForceSigning()
     */
    @Override
    public boolean shouldForceSigning() {
        return this.ctx.getConfig().isIpcSigningEnforced() && !this.ctx.getCredentials().isAnonymous() && isIPC();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.SmbResourceLocator#isIPC()
     */
    @Override
    public boolean isIPC() {

        }

        if (transport.getContext().getConfig().isIpcSigningEnforced() && ("IPC$".equals(this.getShare()) || "IPC".equals(rsvc))
                && !sess.getCredentials().isAnonymous() && sess.getDigest() == null) {
            throw new SmbException("IPC signing is enforced, but no signing is available");
        }

        this.service = rsvc;
        this.inDfs = response.isShareDfs();

                            final SmbTransportImpl transport = tf.getTransportPool()
                                    .getSmbTransport(tf, dr.getServer(), 0, false,
                                            !tf.getCredentials().isAnonymous() && tf.getConfig().isSigningEnabled()
                                                    && tf.getConfig().isIpcSigningEnforced())
                                    .unwrap(SmbTransportImpl.class);

            final SmbTreeImpl t, final DfsReferralData referral, final SmbAuthException sae) throws SmbAuthException, CIFSException {
        try (SmbSessionImpl treesess = t.getSession()) {
            if (treesess.getCredentials().isAnonymous() || treesess.getCredentials().isGuest()) {
                // refresh anonymous session or fallback to anonymous from guest login
                try (SmbSessionInternal s =