@DisplayName("Should handle null and empty FQDN in fixupHost")
        void testFixupHostWithNullAndEmpty(String fqdn) {
            // Test with mock
            doNothing().when(mockReferralData).fixupHost(fqdn);
            assertDoesNotThrow(() -> mockReferralData.fixupHost(fqdn));

            // Test with concrete implementation - fixupHost doesn't handle null fqdn
            if (fqdn == null) {

            final String fqdn = s + "." + dom;
            if (log.isDebugEnabled()) {
                log.debug(String.format("Applying DFS netbios name hack %s -> %s ", s, fqdn));
            }
            this.server = fqdn;
        }
    }

    @Override
    public void fixupHost(final String fqdn) {
        final String s = getServer();

 *
 * @author mbechler
 */
public interface DfsReferralDataInternal extends DfsReferralData {

    /**
     * Replaces the host with the given FQDN if it is currently unqualified
     *
     * @param fqdn the fully qualified domain name to use
     */
    void fixupHost(String fqdn);

    /**
     * Possibly appends the given domain name to the host name if it is currently unqualified
     *

        // Build a token with an arbitrary non-kerberos mechanism OID
        ASN1ObjectIdentifier unsupported = new ASN1ObjectIdentifier("1.2.3.4.5");
        byte[] init = spnegoInitWithMechs(unsupported);

        // Host is a FQDN to pass the short-name check
        SmbUnsupportedOperationException ex =
                assertThrows(SmbUnsupportedOperationException.class, () -> auth.createContext(tc, null, "server.example.com", init, false));

  @JvmField @RegisterExtension
  val clientTestRule =
    OkHttpClientTestRule().apply {
      recordFrames = true
      // recordSslDebug = true
    }

  // https://tools.ietf.org/html/rfc6066#page-6 specifies a FQDN is required.
  val hostname = "local.host"
  private val handshakeCertificates =
    run {
      // Generate a self-signed cert for the server to serve and the client to trust.
      val heldCertificate =

            // While we could look up the domain controller/KDC we cannot really make the java kerberos implementation
            // use a KDC of our choice.
            // A potential workaround would be to try to get the server FQDN by reverse lookup, but this might have
            // security implications and also is not how Microsoft does it.

     * SID and therefore cannot possibly resolve it automatically. In this case,
     * this method will be necessary.
     *
     * @param authorityServerName
     *            The FQDN of the server that is an authority for the SID.
     * @param tc
     *            Context to use
     * @throws IOException if there is an error resolving the SID
     */

	} else {
		// Explicitly set 127.0.0.1 so Console will automatically bypass TLS verification to the local S3 API.
		// This will save users from providing a certificate with IP or FQDN SAN that points to the local host.
		os.Setenv("CONSOLE_MINIO_SERVER", fmt.Sprintf("%s://127.0.0.1:%s", getURLScheme(globalIsTLS), globalMinioPort))
	}
	if value := env.Get(config.EnvMinIOLogQueryURL, ""); value != "" {

     * SID and therefore cannot possibly resolve it automatically. In this case,
     * this method will be necessary.
     *
     * @param authorityServerName The FQDN of the server that is an authority for the SID.
     * @param auth Credentials suitable for accessing the SID's information.
     */
    /**
     * Resolves this SID to obtain its account and domain names.
     *

    /** DFS cache time-to-live in seconds */
    protected long dfsTTL = 300;
    /** Whether to use strict DFS path resolution */
    protected boolean dfsStrictView = false;
    /** Whether to convert DFS paths to FQDN */
    protected boolean dfsConvertToFqdn;
    /** Default logon share */
    protected String logonShare;
    /** Default domain for authentication */
    protected String defaultDomain;