Smb2LeaseKey result = directoryLeaseManager.requestDirectoryLease(directoryPath, requestedState, scope);

        assertEquals(expectedKey, result);
        verify(baseLeaseManager).requestLease(directoryPath, requestedState);

        // Verify cache entry was created
        DirectoryCacheEntry cacheEntry = directoryLeaseManager.getCacheEntry(directoryPath);
        assertNotNull(cacheEntry);

            // Verify with second digest (simulating server verification)
            boolean isValid = digest2.verify(data, 0, data.length, 0, response);

            assertTrue(isValid, "Valid signature should verify correctly");
        }

        @Test
        @DisplayName("Should sign and verify round trip for SMB 2.1")

import static org.junit.jupiter.api.Assertions.fail;
import static org.mockito.Mockito.doReturn;
import static org.mockito.Mockito.spy;
import static org.mockito.Mockito.times;
import static org.mockito.Mockito.verify;
import static org.mockito.Mockito.when;

import java.util.HashMap;

import javax.security.auth.Subject;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.NameCallback;

        byte[] rawKey = keyManager.getRawKey(sessionId);
        assertNotNull(rawKey, "Should retrieve raw key");
        assertArrayEquals(testKey, rawKey, "Raw key should match");

        // Verify we get a copy, not the original
        rawKey[0] = (byte) ~rawKey[0];
        byte[] rawKey2 = keyManager.getRawKey(sessionId);
        assertArrayEquals(testKey, rawKey2, "Should still match original");
    }

    @Test

        // Unregister
        client.unregister(registration).get(5, TimeUnit.SECONDS);

        assertEquals(0, client.getActiveRegistrationCount());

        verify(mockRpc).register(any(WitnessRegisterRequest.class));
        verify(mockRpc).unregister(any(WitnessUnregisterRequest.class));

        client.close();
    }

    @Test
    void testGetWitnessServer() throws Exception {

        boolean inUse = pool.close();

        // Then: Should report in-use and call disconnect on all
        assertTrue(inUse, "Should report connections in use");
        verify(pooledSpy).disconnect(false, false);
        verify(nonPooledSpy).disconnect(false, false);
    }

    @Test
    @DisplayName("Should get challenge from server")
    void testGetChallenge() throws Exception {

        // Then
        assertNotNull(client, "Client should be created successfully");
        verify(mockContext, atLeastOnce()).getConfig();
    }

    @Test
    @DisplayName("Should handle invalid NetBIOS name quickly")
    @Timeout(value = 1, unit = TimeUnit.SECONDS) // Very short timeout
    void testGetNbtByNameInvalid() {
        // When/Then - Should fail quickly with invalid characters

        // When
        encryptionContext.secureWipeKeys();

        // Then - Verify keys are wiped (we can't directly access private fields,
        // but we can verify the context behaves correctly after wiping)
        // After wiping, operations that require keys should fail

        BaseConfiguration config = new BaseConfiguration(true);

        // Verify minimum SMB version is at least SMB 2.0.2 (SMB1 disabled)
        assertTrue("Minimum version should be at least SMB2.0.2", config.getMinimumVersion().atLeast(DialectVersion.SMB202));

        // Verify LM compatibility level is 3 or higher (NTLMv2 only)

import org.junit.jupiter.api.Test;
import org.mockito.Mockito;

import jcifs.CIFSContext;
import jcifs.Configuration;
import jcifs.Credentials;

/**
 * Security-focused test cases for SmbSessionImpl to verify race condition fixes.
 */
public class SmbSessionImplSecurityTest {

    private CIFSContext mockContext;
    private SmbTransportImpl mockTransport;
    private Configuration mockConfig;