assertTrue(rateLimiter.checkAttempt(username, ip), "Should be allowed after lockout expiry");
    }

    @Test
    public void testSuccessResetsCounter() throws Exception {
        String username = "resetuser";
        String ip = "192.168.1.5";

        // Two failures
        assertTrue(rateLimiter.checkAttempt(username, ip));
        rateLimiter.recordFailure(username, ip);

    private TestFessUser testUser;

    @Override
    public void setUp() throws Exception {
        super.setUp();
        testUser = new TestFessUser();
        fessUserBean = new FessUserBean(testUser);
    }

    public void test_getUserId() {
        // Test with normal user
        testUser.setName("testuser");
        assertEquals("testuser", fessUserBean.getUserId());

        return OptionalThing.of(new FessUserBean(new TestUser(name, permissions)));
    }

    static class TestUser implements FessUser {

        private static final long serialVersionUID = 1L;

        private String name;

        private String[] permissions;

        TestUser(String name, String[] permissions) {
            this.name = name;

public class FessUserTest extends UnitFessTestCase {

    public void test_getName() {
        // Test with normal user name
        FessUser user = new TestFessUser("testuser", new String[] { "role1" }, new String[] { "group1" }, new String[] { "perm1" });
        assertEquals("testuser", user.getName());

        // Test with empty name
        user = new TestFessUser("", new String[] {}, new String[] {}, new String[] {});

                        result = result.replace("${" + key + "}", String.valueOf(value));
                    } else if (value instanceof TestUser) {
                        // Handle TestUser object
                        TestUser user = (TestUser) value;
                        result = result.replace("${" + key + ".name}", user.name);

            public String getCanonicalLdapName(String name) {
                return name;
            }
        });
        sambaHelper.init();

        String result = sambaHelper.createSearchRole(1, "TestUser");
        assertEquals("1testuser", result);
    }

    public void test_createSearchRole_keepCase() {
        ComponentUtil.setFessConfig(new FessConfig.SimpleImpl() {
            @Override

        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);

        // User accessors
        assertNull(auth.getUser());
        auth.setUser(null);
        assertNull(auth.getUser());
        auth.setUser("");
        assertEquals("", auth.getUser());

        // Realm accessors
        assertNull(auth.getRealm());
        auth.setRealm("EXAMPLE.COM");

    @BeforeEach
    void setUp() throws CIFSException {
        Properties props = new Properties();
        // Set some default test properties
        props.setProperty("jcifs.smb.client.username", "testuser");
        props.setProperty("jcifs.smb.client.password", "testpass");
        props.setProperty("jcifs.smb.client.domain", "testdomain");
        props.setProperty("jcifs.netbios.hostname", "testhost");

    public void test_insert_noChains() {
        User user = createTestUser("testuser");
        authenticationManager.insert(user);
        // Should not throw exception even with no chains
    }

    // Test insert with single chain
    public void test_insert_singleChain() {
        User user = createTestUser("testuser");
        TestAuthenticationChain chain = new TestAuthenticationChain();

        testFessConfig.ldapAdminSyncPassword = false;

        boolean result = ldapChain.changePassword("testuser", "newpassword");

        assertFalse(result); // returns !changed || syncPassword = !true || false = false
        assertEquals("testuser", testLdapManager.changePasswordUsername);
        assertEquals("newpassword", testLdapManager.changePasswordPassword);