assertEquals(expectedNt, actual.get(), String.format("NTSTATUS for %08x should be %08x", dosErr, expectedNt));
    }

    @Test
    @DisplayName("Unknown DOS error code yields empty Optional")
    void testUnknownCode() {
        Optional<Integer> noMatch = findNtStatus(0xdeadbeef);
        assertFalse(noMatch.isPresent(), "Mapping for unknown code should be absent");
    }

    @Test

        verify(spyAuth, times(1)).getPasswordAsCharArray();
    }

    @Test
    @DisplayName("clone: copies fields and cached subject; instances are independent")
    void testCloneCopiesFieldsAndIndependence() throws Exception {
        // Use configuration-based constructor to also exercise copying of configuration/service fields
        JAASAuthenticator orig = new JAASAuthenticator(new HashMap<String, String>(), "DOM", "user", "pass");

class StaticJAASConfigurationTest {

    // Constants used in assertions
    private static final String EXPECTED_LOGIN_MODULE = "com.sun.security.auth.module.Krb5LoginModule";

    @Test
    @DisplayName("Default constructor yields REQUIRED Krb5 entry with empty options")
    void defaultConstructor_producesRequiredKrb5EntryWithEmptyOptions() {
        // Arrange
        StaticJAASConfiguration cfg = new StaticJAASConfiguration();

        // Act

        // Act
        itr.remove();

        // Assert
        verify(delegate, times(1)).remove();
    }

    @Test
    @DisplayName("Edge: empty delegate yields no elements")
    void emptyDelegate_hasNoNext() {
        // Arrange - no parent setup needed since no URLs are created
        when(delegate.hasNext()).thenReturn(false);

        // Arrange
        SecurityBlob blob = new SecurityBlob(new byte[] { 1, 2, 3 });

        // Force internal field to null via reflection to exercise defensive branch
        Field field = SecurityBlob.class.getDeclaredField("b");
        field.setAccessible(true);
        field.set(blob, null);

        // Act & Assert
        assertEquals(0, blob.length(), "length() should return 0 when internal array is null");

        ASN1ObjectIdentifier[] mechs = ctx.getSupportedMechs();
        assertNotNull(mechs);
        assertArrayEquals(Kerb5Context.SUPPORTED_MECHS, mechs);
    }

    @Test
    @DisplayName("getFlags with all false yields 0")
    void getFlags_allFalse() {
        when(gssContext.getCredDelegState()).thenReturn(false);
        when(gssContext.getMutualAuthState()).thenReturn(false);

        Class<?> cls = req.getClass().getSuperclass(); // ServerMessageBlock2Request
        Field f = cls.getSuperclass().getDeclaredField("next"); // ServerMessageBlock2.next
        f.setAccessible(true);
        return f.get(req);
    }

    /**
     * Reflectively set the private 'results' field on Smb2QueryDirectoryResponse.
     */

        verify(nsc, times(1)).getAllByName("server", true);
        assertTrue(l3.hasNextAddress());
        assertSame(a3, l3.getNextAddress());
        assertFalse(l3.hasNextAddress());

        // UnknownHostException yields CIFSException
        when(nsc.getAllByName("badhost", true)).thenThrow(new UnknownHostException("nope"));
        SmbResourceLocatorImpl bad = locator("smb://badhost/");

   * usually have much noticeable impact. A value of one permits only one thread to modify the map
   * at a time, but since read operations can proceed concurrently, this still yields higher
   * concurrency than full synchronization. Defaults to 4.
   *
   * <p><b>Note:</b> Prior to Guava release 9.0, the default was 16. It is possible the default will

  /**
   * Divides an iterable into unmodifiable sublists of the given size (the final iterable may be
   * smaller). For example, partitioning an iterable containing {@code [a, b, c, d, e]} with a
   * partition size of 3 yields {@code [[a, b, c], [d, e]]} -- an outer iterable containing two
   * inner lists of three and two elements, all in the original order.
   *