if (obj instanceof NtlmPasswordAuthenticator ntlm) {
            String domA = ntlm.getUserDomain() != null ? ntlm.getUserDomain().toUpperCase() : null;
            String domB = this.getUserDomain() != null ? this.getUserDomain().toUpperCase() : null;
            return ntlm.type == this.type && Objects.equals(domA, domB) && ntlm.getUsername().equalsIgnoreCase(this.getUsername())

                doc1.put("title", "Document 1");
                callback.store(initParamMap, doc1);

                Map<String, Object> doc2 = new HashMap<>();
                doc2.put("id", "2");
                doc2.put("title", "Document 2");
                callback.store(initParamMap, doc2);

                // Commit the changes
                callback.commit();
            }

            @Override

        doc1.put("id", "1");
        doc1.put("title", "Document 1");

        Map<String, Object> doc2 = new HashMap<>();
        doc2.put("id", "2");
        doc2.put("title", "Document 2");

        SearchResult result = SearchResult.create().addDocument(doc1).addDocument(doc2).allRecordCount(2L).queryTime(25L).build();

        assertEquals(2, result.getDocumentList().size());

        assertEquals("user@DOM", nc.getName());
        // Password should be set
        assertEquals("pass", new String(pc.getPassword()));
    }

    @Test
    @DisplayName("handle: sets only provided callbacks (name-only)")
    void testHandleNameOnly() throws Exception {
        JAASAuthenticator auth = new JAASAuthenticator("DOM", "user", "secret");

        doc1.put("content", "Test content 1");
        documentItems.add(doc1);

        Map<String, Object> doc2 = new HashMap<>();
        doc2.put("title", "Test Document 2");
        doc2.put("content", "Test content 2");
        documentItems.add(doc2);

        searchRenderData.setDocumentItems(documentItems);
        assertEquals(documentItems, searchRenderData.getDocumentItems());

        void getUserDomain_fallbackToSuper() {
            Kerb5Authenticator auth = new Kerb5Authenticator(null, "DOM", "u", "p");
            // No explicit realm or subject -> returns super.getUserDomain()
            assertEquals("DOM", auth.getUserDomain());
        }
    }

    @Test
    @DisplayName("Protected setSubject: updates subject used by getters")

        // Since we're working with internal state, we'll verify the side effects
        assertEquals("DOM", s1.getDomainName());
        assertEquals("user1", s1.getAccountName());
        assertEquals("DOM", s2.getDomainName());
        assertEquals("user2", s2.getAccountName());
        assertEquals("DOM", s3.getDomainName());
        assertEquals("userX", s3.getAccountName());
    }

    @Test

        @DisplayName("Relative constructor with RID appends last subauthority")
        void testRelativeConstructorWithRid() throws Exception {
            // Arrange
            SID dom = new SID("S-1-5-21-1-2-3");

            // Act
            SID sid = new SID(dom, 1029);

            // Assert
            assertEquals("S-1-5-21-1-2-3-1029", sid.toString());
            assertEquals(1029, sid.getRid());
        }

        when(auth.isAnonymous()).thenReturn(true);
        when(auth.isGuest()).thenReturn(true);
        when(auth.getUsername()).thenReturn("guest");
        when(auth.getUserDomain()).thenReturn("dom");

        // Construct
        SmbComSessionSetupAndX obj = new SmbComSessionSetupAndX(mockContext, mockNegotiate, mockAndX, auth);
        String accountName = (String) getField(obj, "accountName");

        if (tf.getConfig().isDfsDisabled()) {
            return null;
        }
        final String dom = domain.toLowerCase(Locale.ROOT);
        synchronized (this.dcLock) {
            CacheEntry<DfsReferralDataInternal> ce = this.dcCache.get(dom);
            if (ce != null && System.currentTimeMillis() > ce.expiration) {
                ce = null;
            }
            if (ce != null) {