}
        this.server.securityMode = buffer[bufferIndex] & 0xFF;
        bufferIndex++;
        this.server.security = this.server.securityMode & 0x01;
        this.server.encryptedPasswords = (this.server.securityMode & 0x02) == 0x02;
        this.server.signaturesEnabled = (this.server.securityMode & 0x04) == 0x04;
        this.server.signaturesRequired = (this.server.securityMode & 0x08) == 0x08;

    void testConstructorSetsCorrectParameters() throws Exception {
        // Given & When
        int securityMode = 0x03;
        int capabilities = 0x0F;
        long previousSessionId = 0xFEDCBA9876543210L;
        byte[] token = { 0x0A, 0x0B, 0x0C };

        Smb2SessionSetupRequest req = new Smb2SessionSetupRequest(mockContext, securityMode, capabilities, previousSessionId, token);

    @MethodSource("provideSecurityModes")
    void testSecurityModeCombinations(int securityMode) {
        // When
        request = new Smb2NegotiateRequest(mockConfig, securityMode);

        // Then
        assertEquals(securityMode, request.getSecurityMode());
        boolean shouldEnforce = (securityMode & Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED) != 0;

        assertEquals(0, serverData.maxBufferSize);
        assertEquals(0, serverData.sessKey);
        assertEquals(0, serverData.scapabilities);
        assertNull(serverData.oemDomainName);
        assertEquals(0, serverData.securityMode);
        assertEquals(0, serverData.security);
        assertFalse(serverData.encryptedPasswords);
        assertFalse(serverData.signaturesEnabled);
        assertFalse(serverData.signaturesRequired);

        byte[] buffer = new byte[34];
        int bufferIndex = 0;

        // dialectIndex
        buffer[bufferIndex++] = 5;
        buffer[bufferIndex++] = 0;
        // securityMode
        buffer[bufferIndex++] = 0x03;
        // maxMpxCount
        buffer[bufferIndex++] = 50;
        buffer[bufferIndex++] = 0;
        // maxNumberVcs
        buffer[bufferIndex++] = 1;

        }

        this.securityMode = SMBUtil.readInt2(buffer, bufferIndex + 2);
        // Validate security mode flags
        if ((this.securityMode & ~(Smb2Constants.SMB2_NEGOTIATE_SIGNING_ENABLED | Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED)) != 0) {
            log.warn("Server returned unknown security mode flags: 0x{}", Integer.toHexString(this.securityMode));
        }
        bufferIndex += 4;

        // Test signing enabled
        setPrivateField(response, "securityMode", Smb2Constants.SMB2_NEGOTIATE_SIGNING_ENABLED);
        assertTrue(response.isSigningEnabled());
        assertFalse(response.isSigningRequired());
        assertFalse(response.isSigningNegotiated());

        // Test signing required
        setPrivateField(response, "securityMode", Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED);

    class ServerData {
        byte flags;
        int flags2;
        int maxMpxCount;
        int maxBufferSize;
        int sessionKey;
        int capabilities;
        String oemDomainName;
        int securityMode;
        int security;
        boolean encryptedPasswords;
        boolean signaturesEnabled;
        boolean signaturesRequired;
        int maxNumberVcs;
        int maxRawSize;
        long serverTime;