assertEquals("user@DOM", nc.getName());
        // Password should be set
        assertEquals("pass", new String(pc.getPassword()));
    }

    @Test
    @DisplayName("handle: sets only provided callbacks (name-only)")
    void testHandleNameOnly() throws Exception {
        JAASAuthenticator auth = new JAASAuthenticator("DOM", "user", "secret");

        void getUserDomain_fallbackToSuper() {
            Kerb5Authenticator auth = new Kerb5Authenticator(null, "DOM", "u", "p");
            // No explicit realm or subject -> returns super.getUserDomain()
            assertEquals("DOM", auth.getUserDomain());
        }
    }

    @Test
    @DisplayName("Protected setSubject: updates subject used by getters")

        // Since we're working with internal state, we'll verify the side effects
        assertEquals("DOM", s1.getDomainName());
        assertEquals("user1", s1.getAccountName());
        assertEquals("DOM", s2.getDomainName());
        assertEquals("user2", s2.getAccountName());
        assertEquals("DOM", s3.getDomainName());
        assertEquals("userX", s3.getAccountName());
    }

    @Test

        @DisplayName("Relative constructor with RID appends last subauthority")
        void testRelativeConstructorWithRid() throws Exception {
            // Arrange
            SID dom = new SID("S-1-5-21-1-2-3");

            // Act
            SID sid = new SID(dom, 1029);

            // Assert
            assertEquals("S-1-5-21-1-2-3-1029", sid.toString());
            assertEquals(1029, sid.getRid());
        }

        when(auth.isAnonymous()).thenReturn(true);
        when(auth.isGuest()).thenReturn(true);
        when(auth.getUsername()).thenReturn("guest");
        when(auth.getUserDomain()).thenReturn("dom");

        // Construct
        SmbComSessionSetupAndX obj = new SmbComSessionSetupAndX(mockContext, mockNegotiate, mockAndX, auth);
        String accountName = (String) getField(obj, "accountName");

        if (tf.getConfig().isDfsDisabled()) {
            return null;
        }
        final String dom = domain.toLowerCase(Locale.ROOT);
        synchronized (this.dcLock) {
            CacheEntry<DfsReferralDataInternal> ce = this.dcCache.get(dom);
            if (ce != null && System.currentTimeMillis() > ce.expiration) {
                ce = null;
            }
            if (ce != null) {

                if (c == ';') {
                    dom = userInfo.substring(0, i);
                    u = i + 1;
                } else if (c == ':') {
                    pass = userInfo.substring(i + 1);
                    break;
                }
            }
            user = userInfo.substring(u, i);
        }

        this.domain = dom != null ? dom : defDomain != null ? defDomain : "";

    }

    @Test
    void matchesBehavior() {
        // Two distinct auth instances
        NtlmPasswordAuthentication a1 = new NtlmPasswordAuthentication("DOM", "user", "pwd");
        NtlmPasswordAuthentication a2 = new NtlmPasswordAuthentication("DOM", "user", "pwd");
        SmbSession s1 = new SmbSession(addr, 445, inet, 0, a1);
        SmbSession s2 = new SmbSession(addr, 445, inet, 0, a2);

        assertEquals(guest, creds.isGuest());
    }

    @Test
    @DisplayName("unwrap throws on null type")
    void unwrap_null_type_throws() {
        TestCredentials creds = new TestCredentials("DOM", false, false, new Subject(), false);
        // Act & Assert
        NullPointerException npe = assertThrows(NullPointerException.class, () -> creds.unwrap(null));
        assertEquals("type", npe.getMessage());
    }

        }
        this.pathConsumed -= i;
    }

    @Override
    public void fixupDomain(final String dom) {
        final String s = getServer();
        if (s.indexOf('.') < 0 && s.toUpperCase(Locale.ROOT).equals(s)) {
            final String fqdn = s + "." + dom;
            if (log.isDebugEnabled()) {
                log.debug(String.format("Applying DFS netbios name hack %s -> %s ", s, fqdn));