assertNotNull(permissions);
        assertEquals(3, permissions.length);
        assertEquals("Rgroup1", permissions[0]);
        assertEquals("Rgroup2", permissions[1]);
        assertEquals("Utestuser", permissions[2]);

        // Verify callback was called
        assertTrue(activityHelperCalled.get());
        assertNotNull(rolesFromCallback.get());
        assertEquals(2, rolesFromCallback.get().length);

        return OptionalThing.of(new FessUserBean(new TestUser(name, permissions)));
    }

    static class TestUser implements FessUser {

        private static final long serialVersionUID = 1L;

        private String name;

        private String[] permissions;

        TestUser(String name, String[] permissions) {
            this.name = name;

            final FessAdminAction action = createGodHandAction(spyActivityHelper,
                    OptionalThing.of(new FessUserBean(new TestUser("testuser", new String[0]))), true);

            action.godHandPrologue(testRuntime);

            assertEquals(1, capturedLogs.size());
            assertEquals("testuser", capturedLogs.get(0).get("user"));
            assertEquals(path, capturedLogs.get(0).get("path"));
        }
    }

        testFessConfig.ldapAdminSyncPassword = false;

        boolean result = ldapChain.changePassword("testuser", "newpassword");

        assertFalse(result); // returns !changed || syncPassword = !true || false = false
        assertEquals("testuser", testLdapManager.changePasswordUsername);
        assertEquals("newpassword", testLdapManager.changePasswordPassword);

    @Test
    public void test_constructor_withValidUsername() {
        // Test with a normal username
        String username = "testuser";
        FessUserNotFoundException exception = new FessUserNotFoundException(username);

        assertNotNull(exception);
        assertEquals("User is not found: testuser", exception.getMessage());
        assertNull(exception.getCause());
    }

    @Test

        chain.changePasswordResult = true;

        boolean result = chain.changePassword("testuser", "newpassword123");

        assertTrue(result);
        assertEquals(1, chain.changePasswordCalls.size());
        assertEquals("testuser", chain.changePasswordCalls.get(0).getKey());
        assertEquals("newpassword123", chain.changePasswordCalls.get(0).getValue());
    }

            @Override
            public String getLdapAdminUserFilter() {
                return "(uid=%s)";
            }
        };

        // Normal name
        assertEquals("(uid=testuser)", fessConfig.getLdapAdminUserFilter("testuser"));

        // Asterisk injection attempt
        assertEquals("(uid=test\\2a)", fessConfig.getLdapAdminUserFilter("test*"));

        // LDAP injection attempt

        TestLoginCredential expectedCredential = new TestLoginCredential("testuser", "testpass");
        authenticator.setLoginCredential(expectedCredential);

        // Execute
        LoginCredential result = authenticator.getLoginCredential();

        // Verify
        assertNotNull(result);
        assertEquals(expectedCredential, result);
        assertEquals("testuser", ((TestLoginCredential) result).getUsername());

    }

    @Test
    public void test_getLoginCredential_withValidAuthenticator() {
        currentSsoType = "test";
        final LoginCredential expectedCredential = new TestLoginCredential("testuser");
        testAuthenticator.setLoginCredential(expectedCredential);

        ssoManager = new SsoManager() {
            @Override
            protected String getSsoType() {
                return currentSsoType;