* verifying interaction.
     */
    private class RecordingFilter implements SmbFileFilter {
        private SmbFile lastFile;
        private String lastPath;

        @Override
        public boolean accept(SmbFile file) throws SmbException {
            lastFile = file;
            // Actually interact with the file to verify the mock interaction
            if (file != null) {

        MsrpcLsarOpenPolicy2 msrpcLsarOpenPolicy2 = new MsrpcLsarOpenPolicy2(server, access, mockPolicyHandle);

        // Then
        // Verify that the super constructor is called with correct arguments
        // Note: Directly verifying super constructor calls is not straightforward in JUnit/Mockito.
        // We verify the effects of the super constructor by checking the fields of the created object.

        // Assert object_attributes fields

 * verifying that implementations honour the contract.
 */
@ExtendWith(MockitoExtension.class)
public class AllocInfoTest {

    @Mock
    AllocInfo mockAllocInfo;

    /**
     * Happy path – verifies that getters return the values supplied by the
     * implementation.
     */
    @Test
    @DisplayName("verify getters return stubbed values")

///

## Hash and verify the passwords { #hash-and-verify-the-passwords }

Import the tools we need from `passlib`.

Create a PassLib "context". This is what will be used to hash and verify passwords.

/// tip

The PassLib context also has functionality to use different hashing algorithms, including deprecated old ones only to allow verifying them, etc.

     * This constructor used to instance a SigningDigest object for
     * signing/verifying SMB using kerberos session key.
     * The MAC Key = concat(Session Key, Digest of Challenge);
     * Because of Kerberos Authentication don't have challenge,
     * The MAC Key = Session Key
     *
     * @param macSigningKey
     *            The MAC key used to sign or verify SMB.
     */
    public SMB1SigningDigest(final byte[] macSigningKey) {

You can try it already in the interactive docs:

<img src="/img/tutorial/security/image03.png">

We are not verifying the validity of the token yet, but that's a start already.

## Recap { #recap }

        verify(mockNdrBuffer).enc_ndr_long(5); // current_uses
        verify(mockNdrBuffer).enc_ndr_referent("C:\\test", 1);
        verify(mockNdrBuffer).enc_ndr_referent("password", 1);
        verify(mockNdrBuffer).enc_ndr_referent(shareInfo502.security_descriptor, 1);

        // Verify string encodings
        verify(mockDeferredBuffer, times(4)).enc_ndr_string(anyString());

        // Verify security descriptor encoding

        verify(mockDelegate).getConfig();
    }

    @Test
    void testGetDfs() {
        // Test getDfs() method
        DfsResolver mockDfsResolver = mock(DfsResolver.class);
        when(mockDelegate.getDfs()).thenReturn(mockDfsResolver);
        assertEquals(mockDfsResolver, cifsContextWrapper.getDfs());
        verify(mockDelegate).getDfs();
    }

    @Test

            verify(mockNdrBuffer).derive(anyInt());
            // Verify each node byte is encoded
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xAA);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xBB);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xCC);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xDD);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xEE);

        int currentIndex = 2 + descr.length;
        // Verify level (0x0001)
        assertEquals(1, (dst[currentIndex] & 0xFF) | ((dst[currentIndex + 1] & 0xFF) << 8));
        currentIndex += 2;

        // Verify maxDataCount
        assertEquals(netServerEnum2.maxDataCount, (dst[currentIndex] & 0xFF) | ((dst[currentIndex + 1] & 0xFF) << 8));
        currentIndex += 2;

        // Verify serverTypes