*
 * Features:
 * - Per-account rate limiting
 * - Per-IP rate limiting
 * - Global rate limiting
 * - Exponential backoff for repeated failures
 * - Account lockout after threshold
 * - Automatic cleanup of old entries
 */
public class AuthenticationRateLimiter implements AutoCloseable {

    private static final Logger log = LoggerFactory.getLogger(AuthenticationRateLimiter.class);

        } catch (SmbException e) {
            // Expected
        }

        // Wait for lockout to expire
        Thread.sleep(2100); // Lockout is 2 seconds in test setup

        // Should be allowed again
        assertTrue(rateLimiter.checkAttempt(username, ip), "Should be allowed after lockout expiry");
    }

    @Test
    public void testSuccessResetsCounter() throws Exception {

        getFirstAddress();
        for (;;) {
            try {
                doConnect();
                return;
            } catch (final SmbAuthException sae) {
                throw sae; // Prevents account lockout on servers with multiple IPs
            } catch (final SmbException se) {
                if (getNextAddress() == null) {
                    throw se;
                }
                if (LogStream.level >= 3) {

        // Mock the stream directly
        SmbPipeOutputStream mockOut = mock(SmbPipeOutputStream.class);

        // Create spy and override getOutput
        SmbPipeHandleImpl spyHandle = spy(handle);
        doReturn(mockOut).when(spyHandle).getOutput();

        byte[] b = new byte[10];
        spyHandle.send(b, 2, 4);
        verify(mockOut).writeDirect(eq(b), eq(2), eq(4), eq(1));
    }

    @Test