void testGetUserDomain() {
        // Given
        String domain = "TESTDOMAIN";
        when(mockCredentials.getUserDomain()).thenReturn(domain);

        // When
        String result = mockCredentials.getUserDomain();

        // Then
        assertEquals(domain, result);
        verify(mockCredentials).getUserDomain();
    }

    @Test
    @DisplayName("Should check for anonymous credentials")
    void testIsAnonymous() {

                        if (this.isUseUnicode()) {
                            this.accountName = this.accountName.toUpperCase();
                        }
                        this.primaryDomain = a.getUserDomain() != null ? a.getUserDomain().toUpperCase() : "?";
                    } else {
                        this.accountName = "";
                        this.primaryDomain = "";
                    }
                } else {

        when(mockCredentials.getUserDomain()).thenReturn(null);
        assertFalse(dfsImpl.isTrustedDomain(mockContext, "anydomain.com"));
    }

    @Test
    void testIsTrustedDomain_ConnectionFails() throws SmbAuthException {
        // Scenario: Transport connection fails
        when(mockCredentials.getUserDomain()).thenReturn("authdomain.com");

            assertEquals("EXAMPLE.COM", auth.getUserDomain());
        }

        @Test
        @DisplayName("getUserDomain: explicit realm overrides")
        void getUserDomain_fromExplicitRealm() {
            Kerb5Authenticator auth = new Kerb5Authenticator(new Subject());
            auth.setRealm("REALM.TEST");
            assertEquals("REALM.TEST", auth.getUserDomain());
        }

        @Test

        // Act
        TestCredentials copy = creds.clone();

        // Assert
        assertNotSame(creds, copy, "clone must return a new instance");
        assertEquals(creds.getUserDomain(), copy.getUserDomain());
        assertEquals(creds.isAnonymous(), copy.isAnonymous());
        assertEquals(creds.isGuest(), copy.isGuest());
        assertSame(subject, copy.getSubject(), "subject is the same reference in clone");

    void testIsTrustedDomain_NoUserDomain() throws CIFSException {
        when(mockConfig.isDfsDisabled()).thenReturn(false);
        when(mockContext.getCredentials()).thenReturn(mockCredentials);
        when(mockCredentials.getUserDomain()).thenReturn(null);
        assertFalse(dfsResolver.isTrustedDomain(mockContext, "anyDomain"));
    }

    @Test
    void testIsTrustedDomain_EmptyUserDomain() throws CIFSException {

     */
    @Override
    public boolean equals(Object obj) {
        if (obj instanceof NtlmPasswordAuthenticator ntlm) {
            String domA = ntlm.getUserDomain() != null ? ntlm.getUserDomain().toUpperCase() : null;
            String domB = this.getUserDomain() != null ? this.getUserDomain().toUpperCase() : null;
            return ntlm.type == this.type && Objects.equals(domA, domB) && ntlm.getUsername().equalsIgnoreCase(this.getUsername())

        NtlmPasswordAuthenticator cloned = original.clone();

        // Verify cloned values
        assertEquals(original.getUserDomain(), cloned.getUserDomain());
        assertEquals(original.getUsername(), cloned.getUsername());
        assertEquals(original.getPassword(), cloned.getPassword());

        // Verify password arrays are independent

        if (this.auth instanceof NtlmNtHashAuthenticator) {
            return new Type3Message(this.transportContext, msg2, this.targetName, this.auth.getNTHash(), this.auth.getUserDomain(),
                    this.auth.getUsername(), this.workstation, this.ntlmsspFlags);
        }

        // Use secure password handling
        String passwordString = null;
        if (this.auth.isGuest()) {

        // Clone and verify basic fields copied
        JAASAuthenticator copy = (JAASAuthenticator) orig.clone();
        assertEquals(orig.getUsername(), copy.getUsername());
        assertEquals(orig.getUserDomain(), copy.getUserDomain());
        assertEquals(orig.getPassword(), copy.getPassword());

        // Test the cloning behavior with both null and non-null cached subjects
        if (first != null) {