assertEquals("user", auth.getUsername());
        assertEquals("password", auth.getPassword());
    }

    // Test constructor with user info string without password
    @Test
    void testConstructorWithUserInfoNoPassword() {
        NtlmPasswordAuthentication auth = new NtlmPasswordAuthentication("DOMAIN;user");
        assertEquals("DOMAIN", auth.getDomain());
        assertEquals("user", auth.getUsername());

    void testInitSecContext_state2_type3Message() throws Exception {
        // Test the second step (processing Type 2 and creating Type 3 message)
        when(mockAuth.getDomain()).thenReturn(domain);
        when(mockAuth.getUsername()).thenReturn(username);
        when(mockAuth.getPassword()).thenReturn(password);
        NtlmContext context = new NtlmContext(mockAuth, true);

        // State 1: Generate Type 1 message

        // Use mocking to test getters without complex PAC data creation
        PacLogonInfo logonInfo = mock(PacLogonInfo.class);

        // Setup mock responses
        when(logonInfo.getUserName()).thenReturn(TEST_USERNAME);
        when(logonInfo.getDomainName()).thenReturn(TEST_DOMAIN);
        when(logonInfo.getServerName()).thenReturn(TEST_SERVER);
        when(logonInfo.getLogonTime()).thenReturn(new Date());

                    this.ntHash = new byte[0];
                    this.capabilities &= ~SmbConstants.CAP_EXTENDED_SECURITY;
                    if (a.isGuest()) {
                        this.accountName = a.getUsername();
                        if (this.isUseUnicode()) {
                            this.accountName = this.accountName.toUpperCase();
                        }

        // Clone and verify basic fields copied
        JAASAuthenticator copy = (JAASAuthenticator) orig.clone();
        assertEquals(orig.getUsername(), copy.getUsername());
        assertEquals(orig.getUserDomain(), copy.getUserDomain());
        assertEquals(orig.getPassword(), copy.getPassword());

        // Test the cloning behavior with both null and non-null cached subjects

            String domB = this.getUserDomain() != null ? this.getUserDomain().toUpperCase() : null;
            return ntlm.type == this.type && Objects.equals(domA, domB) && ntlm.getUsername().equalsIgnoreCase(this.getUsername())
                    && constantTimeEquals(getPasswordAsCharArray(), ntlm.getPasswordAsCharArray());
        }
        return false;
    }

    /**

        NtlmPasswordAuthenticator cloned = original.clone();

        // Verify cloned values
        assertEquals(original.getUserDomain(), cloned.getUserDomain());
        assertEquals(original.getUsername(), cloned.getUsername());
        assertEquals(original.getPassword(), cloned.getPassword());

        // Verify password arrays are independent
        original.secureWipePassword();
        assertNull(original.getPassword());

            this.timestamp = System.currentTimeMillis();
            this.clientAddress = clientAddress;
            this.serverAddress = serverAddress;
        }

        public String getUsername() {
            return username;
        }

        public String getDomain() {
            return domain;
        }

        public AuthType getAuthType() {
            return authType;

        public TestLoginCredential(String username, String password) {
            this.username = username;
            this.password = password;
        }

        public String getUsername() {
            return username;
        }

        public String getPassword() {
            return password;
        }
    }

    // Test getLoginCredential method

        if (this.auth instanceof NtlmNtHashAuthenticator) {
            return new Type3Message(this.transportContext, msg2, this.targetName, this.auth.getNTHash(), this.auth.getUserDomain(),
                    this.auth.getUsername(), this.workstation, this.ntlmsspFlags);
        }

        // Use secure password handling
        String passwordString = null;
        if (this.auth.isGuest()) {