@DisplayName("Should handle null and empty FQDN in fixupHost")
        void testFixupHostWithNullAndEmpty(String fqdn) {
            // Test with mock
            doNothing().when(mockReferralData).fixupHost(fqdn);
            assertDoesNotThrow(() -> mockReferralData.fixupHost(fqdn));

            // Test with concrete implementation - fixupHost doesn't handle null fqdn
            if (fqdn == null) {

 *
 * @author mbechler
 */
public interface DfsReferralDataInternal extends DfsReferralData {

    /**
     * Replaces the host with the given FQDN if it is currently unqualified
     *
     * @param fqdn the fully qualified domain name to use
     */
    void fixupHost(String fqdn);

    /**
     * Possibly appends the given domain name to the host name if it is currently unqualified
     *

            final String fqdn = s + "." + dom;
            if (log.isDebugEnabled()) {
                log.debug(String.format("Applying DFS netbios name hack %s -> %s ", s, fqdn));
            }
            this.server = fqdn;
        }
    }

    @Override
    public void fixupHost(final String fqdn) {
        final String s = getServer();

        // Build a token with an arbitrary non-kerberos mechanism OID
        ASN1ObjectIdentifier unsupported = new ASN1ObjectIdentifier("1.2.3.4.5");
        byte[] init = spnegoInitWithMechs(unsupported);

        // Host is a FQDN to pass the short-name check
        SmbUnsupportedOperationException ex =
                assertThrows(SmbUnsupportedOperationException.class, () -> auth.createContext(tc, null, "server.example.com", init, false));

  @JvmField @RegisterExtension
  val clientTestRule =
    OkHttpClientTestRule().apply {
      recordFrames = true
      // recordSslDebug = true
    }

  // https://tools.ietf.org/html/rfc6066#page-6 specifies a FQDN is required.
  val hostname = "local.host"
  private val handshakeCertificates =
    run {
      // Generate a self-signed cert for the server to serve and the client to trust.
      val heldCertificate =

        @DisplayName("Should fixup host for matching FQDN")
        void testFixupHostWithMatchingFQDN() {
            setupReferralWithServer("SERVER");

            referralData.fixupHost("server.example.com");

            assertEquals("server.example.com", referralData.getServer());
        }

        @Test
        @DisplayName("Should not fixup host for non-matching FQDN")
        void testFixupHostWithNonMatchingFQDN() {

        assertEquals(ipUNC, testImplementation.getFullUNCPath());
        assertEquals("192.168.1.100", testImplementation.getServer());

        // UNC path with FQDN
        String fqdnUNC = "\\\\server.example.com\\share\\folder\\file.txt";
        testImplementation.setFullUNCPath("EXAMPLE", "server.example.com", fqdnUNC);
        assertEquals(fqdnUNC, testImplementation.getFullUNCPath());

            // While we could look up the domain controller/KDC we cannot really make the java kerberos implementation
            // use a KDC of our choice.
            // A potential workaround would be to try to get the server FQDN by reverse lookup, but this might have
            // security implications and also is not how Microsoft does it.

     * SID and therefore cannot possibly resolve it automatically. In this case,
     * this method will be necessary.
     *
     * @param authorityServerName
     *            The FQDN of the server that is an authority for the SID.
     * @param tc
     *            Context to use
     * @throws IOException if there is an error resolving the SID
     */

     * SID and therefore cannot possibly resolve it automatically. In this case,
     * this method will be necessary.
     *
     * @param authorityServerName The FQDN of the server that is an authority for the SID.
     * @param auth Credentials suitable for accessing the SID's information.
     */
    /**
     * Resolves this SID to obtain its account and domain names.
     *