pacMacMock.when(() -> PacMac.calculateMac(anyInt(), any(), any())).thenReturn(mockChecksum);

            // Create a minimal valid PAC structure
            ByteArrayOutputStream baos = new ByteArrayOutputStream();
            writeLittleEndianInt(baos, 3); // bufferCount = 3 (minimum required)
            writeLittleEndianInt(baos, PacConstants.PAC_VERSION); // version

            // Buffer 1: LOGON_INFO

import org.junit.jupiter.params.ParameterizedTest;
import org.junit.jupiter.params.provider.ValueSource;

import jcifs.pac.PACDecodingException;

class KerberosApRequestTest {

    // Helper: build a minimal, valid-looking ASN.1 AP-REQ sequence with tags 0/1/2
    private ASN1Sequence buildMinimalApReqSeq(byte apOptions) {
        ASN1EncodableVector v = new ASN1EncodableVector();
        // pvno [0] INTEGER 5

   * {@code A -> B}.
   *
   * @since 9.0 (in 1.0 as {@code com.google.common.base.Service.State})
   */
  enum State {
    /** A service in this state is inactive. It does minimal work and consumes minimal resources. */
    NEW,

    /** A service in this state is transitioning to {@link #RUNNING}. */
    STARTING,

    /** A service in this state is operational. */
    RUNNING,

   *
   * @since 21.0
   */
  boolean enclosesAll(Iterable<Range<C>> other);

  /** Returns {@code true} if this range set contains no ranges. */
  boolean isEmpty();

  /**
   * Returns the minimal range which {@linkplain Range#encloses(Range) encloses} all ranges in this
   * range set.
   *
   * @throws NoSuchElementException if this range set is {@linkplain #isEmpty() empty}
   */
  Range<C> span();

        testBuffer[5] = 0x00; // Access mask byte 1
        testBuffer[6] = 0x12; // Access mask byte 2
        testBuffer[7] = 0x00; // Access mask byte 3

        // Add minimal SID data (S-1-1-0 - Everyone)
        testBuffer[8] = 0x01; // Revision
        testBuffer[9] = 0x01; // Sub-authority count
        testBuffer[10] = 0x00; // Identifier authority
        testBuffer[11] = 0x00;

                return forceStop.get();
            }

            public void setForceStop(boolean value) {
                forceStop.set(value);
            }
        }, "systemHelper");

        // Minimal FessConfig
        ComponentUtil.setFessConfig(new FessConfig.SimpleImpl() {
            private static final long serialVersionUID = 1L;

            @Override
            public int getCrawlingThreadCount() {

   * {@code A -> B}.
   *
   * @since 9.0 (in 1.0 as {@code com.google.common.base.Service.State})
   */
  enum State {
    /** A service in this state is inactive. It does minimal work and consumes minimal resources. */
    NEW,

    /** A service in this state is transitioning to {@link #RUNNING}. */
    STARTING,

    /** A service in this state is operational. */
    RUNNING,

        assertEquals("Invalid PAC credential type", exception.getMessage());
    }

    /**
     * Tests the constructor with a byte array that is larger than the minimal buffer size.
     */
    @Test
    void testConstructorWithDataMuchLarger() {
        // A byte array with a length greater than 32 should also be considered too large.
        byte[] veryLargeData = new byte[100];

            assertThrows(ArrayIndexOutOfBoundsException.class, () -> {
                response.readDataWireFormat(buffer, 0, 0);
            });
        }

        @Test
        @DisplayName("Should handle minimal DFS referral buffer")
        void testReadDataWireFormatMinimalBuffer() {
            byte[] buffer = createMinimalDfsReferralBuffer();

            int bytesRead = response.readDataWireFormat(buffer, 0, buffer.length);

import java.io.IOException;

import org.junit.jupiter.api.DisplayName;
import org.junit.jupiter.api.Test;

/**
 * Tests for SpnegoToken.
 * Uses a minimal concrete subclass to exercise abstract methods.
 */
class SpnegoTokenTest {

    /**
     * Minimal concrete implementation for testing.
     * - parse: sets mechanismToken, throws on null
     * - toByteArray: returns mechanismToken or empty array if null
     */