assertTrue(rateLimiter.checkAttempt(username, ip), "Should be allowed after lockout expiry");
    }

    @Test
    public void testSuccessResetsCounter() throws Exception {
        String username = "resetuser";
        String ip = "192.168.1.5";

        // Two failures
        assertTrue(rateLimiter.checkAttempt(username, ip));
        rateLimiter.recordFailure(username, ip);

        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);

        // User accessors
        assertNull(auth.getUser());
        auth.setUser(null);
        assertNull(auth.getUser());
        auth.setUser("");
        assertEquals("", auth.getUser());

        // Realm accessors
        assertNull(auth.getRealm());
        auth.setRealm("EXAMPLE.COM");

    @BeforeEach
    void setUp() throws CIFSException {
        Properties props = new Properties();
        // Set some default test properties
        props.setProperty("jcifs.smb.client.username", "testuser");
        props.setProperty("jcifs.smb.client.password", "testpass");
        props.setProperty("jcifs.smb.client.domain", "testdomain");
        props.setProperty("jcifs.netbios.hostname", "testhost");

                        "-s", "empty;/empty;no;no;no;testuser", //
                        "-s", "deep;/deep;no;no;no;testuser", //
                        "-s", "special;/special;no;no;no;testuser", //
                        "-g", "server min protocol = NT1", //
                        "-g", "log level = 3");
        logger.info("Starting Samba container with image {}", IMAGE_NAME);

        server.start();
        return server;
    }

    public void test_doGet_root_dir() throws FtpException {
        FtpServer server = null;
        try {
            String username = "testuser";
            String password = "testpass";
            server = startFtpServer(FTP_PORT, username, password);
            Map<String, Object> params = new HashMap<String, Object>();

        char[] testPassword = "DomainPass321!".toCharArray();
        NtlmPasswordAuthenticator auth = new NtlmPasswordAuthenticator("DOMAIN", "testuser", testPassword);

        assertEquals("DOMAIN", auth.getUserDomain());
        assertEquals("testuser", auth.getUsername());
        assertEquals(new String(testPassword), auth.getPassword());
    }

    /**
     * Test null password handling
     */

    public void test_matches() throws Exception {
        FtpAuthentication auth = new FtpAuthentication();
        auth.setServer("hostname");
        auth.setPort(21);
        auth.setUsername("testuser");
        auth.setPassword("testpass");

        assertTrue(auth.matches("ftp://hostname:21/test/aaa.html"));
        assertTrue(auth.matches("ftp://hostname/test/aaa.html"));

    }

    @Test
    @DisplayName("Test log authentication success")
    void testLogAuthentication() {
        logger.logAuthentication(true, "testuser", "DOMAIN", "192.168.1.1");

        Map<EventType, Long> stats = logger.getStatistics();
        assertEquals(Long.valueOf(1), stats.get(EventType.AUTHENTICATION_SUCCESS), "Should have 1 authentication event");
    }

        for (int i = 0; i < 100; i++) {
            NtlmPasswordAuthenticator auth1 = new NtlmPasswordAuthenticator("testdomain", "testuser", "password123");
            NtlmPasswordAuthenticator auth2 = new NtlmPasswordAuthenticator("testdomain", "testuser", "password124");
            auth1.equals(auth2);
        }
    }

    /**
     * Test that password comparison is constant-time by comparing execution times

    /**
     * Creates a Type-3 message using default values from the current
     * environment.
     */
    public Type3Message() {
        setFlags(getDefaultFlags());
        setDomain(getDefaultDomain());
        setUser(getDefaultUser());
        setWorkstation(getDefaultWorkstation());
    }

    /**
     * Creates a Type-3 message in response to the given Type-2 message
     * using default values from the current environment.