if (session != null && session.getAttribute("npa-workgroup") != null) {
                    // Simply return success for path handling test
                    resp.setStatus(HttpServletResponse.SC_OK);
                } else {
                    resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                    resp.setHeader("WWW-Authenticate", "NTLM");
                    resp.flushBuffer();
                }
            }

        ntlmServlet.service(request, response);

        verify(response).setHeader("WWW-Authenticate", "NTLM");
        verify(response).addHeader("WWW-Authenticate", "Basic realm=\"TestRealm\"");
        verify(response).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }

    /**
     * Test the service method with a valid NTLM Authorization header.
     * Simulates a successful NTLM authentication.
     * @throws ServletException

        when(httpSession.getAttribute("NtlmHttpAuth")).thenReturn(null);

        filter.doFilter(request, response, filterChain);

        verify(response).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        verify(response).setHeader("WWW-Authenticate", "NTLM");
        verify(response).addHeader("WWW-Authenticate", "Basic realm=\"TestRealm\"");

        void testVerifySignatureSuccess() throws Exception {
            byte[] buffer = new byte[1024];
            echoResponse.setDigest(mockDigest);
            setStatus(echoResponse, NtStatus.NT_STATUS_SUCCESS);

            when(mockConfig.isRequireSecureNegotiate()).thenReturn(true);
            when(mockDigest.verify(buffer, 0, 100, 0, echoResponse)).thenReturn(false);

                // Mark response as received and set status = NT_STATUS_NO_SUCH_FILE
                setStatus(qr, NtStatus.NT_STATUS_NO_SUCH_FILE);
                qr.received();
                q.setResponse(qr);
                // Now emulate error thrown by transport for create chain

        // Verify
        assertNull(result, "Authentication result should be null");
        verify(mockResponse).setHeader("WWW-Authenticate", "NTLM");
        verify(mockResponse).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        verify(mockResponse).setContentLength(0);
        verify(mockResponse).flushBuffer();
    }

    /**

    }

    // Helper methods using reflection to access private fields

    private int getStatus(NetShareEnumResponse response) throws Exception {
        Field field = getSuperclassField(response.getClass(), "status");
        field.setAccessible(true);
        return field.getInt(response);
    }

    private void setStatus(NetShareEnumResponse response, int value) throws Exception {

            }
        } else {
            resp.setHeader("WWW-Authenticate", "NTLM");
        }
        resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        resp.setContentLength(0);
        resp.flushBuffer();
        return null;
    }

    }

    /**
     * Get negotiation status
     *
     * @return status code (0 = success)
     */
    public int getStatus() {
        return status;
    }

    /**
     * Set negotiation status
     *
     * @param status status code
     */
    public void setStatus(int status) {
        this.status = status;
    }

    /**
     * Get selected protocol version
     *

        setStatus(response, NtStatus.NT_STATUS_NOTIFY_ENUM_DIR);
        assertFalse(response.isErrorResponseStatus());

        // Test with success status
        setStatus(response, NtStatus.NT_STATUS_SUCCESS);
        assertFalse(response.isErrorResponseStatus());

        // Test with error status
        setStatus(response, NtStatus.NT_STATUS_ACCESS_DENIED);