setField(session, "digest", dg);
        assertFalse(session.isSignatureSetupRequired());

        // Case 2: no digest, signing enforced by transport -> true
        setField(session, "digest", null);
        when(transport.isSigningEnforced()).thenReturn(true);
        assertTrue(session.isSignatureSetupRequired());

        // Case 3: not enforced, rely on negotiate response flag

            t.treeConnect(null, null);
        } catch (CIFSException e) {
            throw SmbException.wrap(e);
        }
    }

    boolean isSignatureSetupRequired() throws SmbException {
        SMBSigningDigest cur = getDigest();
        if (cur != null) {
            return false;
        }
        if (this.transport.isSigningEnforced()) {
            return true;

                         * Only the first SMB_COM_SESSION_SETUP_ANX with non-null or
                         * blank password initializes signing.
                         */
                        if (transport.isSignatureSetupRequired(auth)) {
                            if (auth.hashesExternal && NtlmPasswordAuthentication.DEFAULT_PASSWORD != NtlmPasswordAuthentication.BLANK) {
                                /* preauthentication

        } catch (final IOException ioe) {
            throw new SmbException(ioe.getMessage(), ioe);
        }
        return (capabilities & cap) == cap;
    }

    boolean isSignatureSetupRequired(final NtlmPasswordAuthentication auth) {
        return (flags2 & SmbConstants.FLAGS2_SECURITY_SIGNATURES) != 0 && digest == null && auth != NtlmPasswordAuthentication.NULL