byte[] content;
        try ( ASN1InputStream stream = new ASN1InputStream(token) ) {
            content = ASN1Util.readUnparsedTagged(0, 0x8000, stream);
        }catch ( IOException e ) {
            throw new PACDecodingException("Malformed kerberos token", e);
        }

        try ( ASN1InputStream stream = new ASN1InputStream(content) ) {

import jcifs.CIFSException;
import jcifs.Config;
import jcifs.config.PropertyConfiguration;
import jcifs.context.BaseContext;
import jcifs.netbios.UniAddress;
import jcifs.smb.NtlmPasswordAuthentication;
import jcifs.smb.SmbAuthException;


/**
 * This servlet may be used with pre-2.3 servlet containers
 * to protect content with NTLM HTTP Authentication. Servlets that
 * extend this abstract base class may be authenticated against an SMB

            url = file.getLocator().getPath();
            resp.setContentType("text/plain");
            resp.setContentType(URLConnection.guessContentTypeFromName(url));
            resp.setHeader("Content-Length", file.length() + "");
            resp.setHeader("Accept-Ranges", "Bytes");

            while ( ( n = in.read(buf) ) != -1 ) {
                out.write(buf, 0, n);
            }
        }
    }

                    type.length() > 1 && type.length() < 6 ) {
                resp.setContentType( mimeMap.getMimeType( type ));
            }
            resp.setHeader( "Content-Length", file.length() + "" );
            resp.setHeader( "Accept-Ranges", "Bytes" );

            while(( n = in.read( buf )) != -1 ) {
                out.write( buf, 0, n );
            }
        }

        if ( tag != expectTag ) {
            throw new IOException("Unexpected tag " + tag);
        }
        int length = readLength(in, limit, false);
        byte[] content = new byte[length];
        in.read(content);
        return content;
    }

    // shamelessly stolen from BC ASN1InputStream
    static int readTagNumber(InputStream s, int tag)
            throws IOException
    {

import org.junit.Test;

import jcifs.CIFSContext;
import jcifs.context.SingletonContext;
import jcifs.ntlmssp.NtlmFlags;
import jcifs.ntlmssp.Type1Message;
import jcifs.ntlmssp.Type2Message;
import jcifs.ntlmssp.Type3Message;


/**
 * @author mbechler
 *
 */
@SuppressWarnings ( "javadoc" )
public class NtlmTest {

    private CIFSContext context;


    @Before
    public void setUp () {

public interface NetbiosAddress extends Address {

    /**
     * Determines if the address is a group address. This is also
     * known as a workgroup name or group name.
     * 
     * @param tc
     *            context to use
     * @return whether the given address is a group address
     *
     * @throws UnknownHostException
     *             if the host cannot be resolved to find out.
     */

    public static final int DCERPC_FAULT_NDR              = 0x000006F7;
    public static final int DCERPC_FAULT_INVALID_TAG      = 0x1C000006;
    public static final int DCERPC_FAULT_CONTEXT_MISMATCH = 0x1C00001A;
    public static final int DCERPC_FAULT_OP_RNG_ERROR     = 0x1C010002;
    public static final int DCERPC_FAULT_UNK_IF           = 0x1C010003;

import javax.servlet.http.HttpServlet;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

/**
 * This servlet may be used with pre-2.3 servlet containers
 * to protect content with NTLM HTTP Authentication. Servlets that
 * extend this abstract base class may be authenticatied against an SMB
 * server or domain controller depending on how the

        buf.enc_ndr_short(max_recv);
        buf.enc_ndr_long(0); /* assoc. group */
        buf.enc_ndr_small(1); /* num context items */
        buf.enc_ndr_small(0); /* reserved */
        buf.enc_ndr_short(0); /* reserved2 */
        buf.enc_ndr_short(0); /* context id */
        buf.enc_ndr_small(1); /* number of items */
        buf.enc_ndr_small(0); /* reserved */
        binding.uuid.encode(buf);