case 3:
            ms_usage = 8;
        case 9:
            ms_usage = 8;
        case 23:
            ms_usage = 13;
        }
        return ms_usage;
    }


    public static byte[] calculateMacHMACAES ( int usage, KerberosKey baseKey, byte[] input ) throws GeneralSecurityException {
        byte[] cst = new byte[] {

     */
    private static void verifyAESMAC ( int usage, String expect, String data, String key ) throws GeneralSecurityException {
        verifyAESHMAC(usage, expect, key, Hex.decode(data));
    }


    private static void verifyArcfourHMAC ( int usage, String expect, String data, String key ) throws GeneralSecurityException {
        verifyArcfourHMAC(usage, expect, key, Hex.decode(data));
    }


    /**

    public void release () {
        long usage = this.usageCount.decrementAndGet();
        if ( log.isTraceEnabled() ) {
            log.trace("Release transport " + usage + " " + this);
        }

        if ( usage == 0 ) {
            if ( log.isTraceEnabled() ) {
                log.trace("Transport usage dropped to zero " + this);
            }
        }
        else if ( usage < 0 ) {

     * 
     * If set, requests an identify level token
     */
    public static final int NTLMSSP_REQUEST_ACCEPT_RESPONSE = 0x00200000;

    /**
     * Requests the usage of the LMOWF
     */
    public static final int NTLMSSP_REQUEST_NON_NT_SESSION_KEY = 0x00400000;

    /**
     * Sent by the server in the Type 2 message to indicate that it is

import jcifs.spnego.NegTokenInit;


/**
 * Base kerberos authenticator
 * 
 * Uses a subject that contains kerberos credentials for use in GSSAPI context establishment.
 * 
 * Be advised that short/NetBIOS name usage is not supported with this authenticator. Always specify full FQDNs.
 * This can be a problem if using DFS in it's default configuration as they still return referrals in short form.

     *
     * @see jcifs.BufferCache#releaseBuffer(byte[])
     */
    @Override
    public void releaseBuffer ( byte[] buf ) {
        if ( buf == null ) {
            return;
        }
        // better safe than sorry: prevent leaks if there is some out of bound access
        Arrays.fill(buf, (byte) 0);
        synchronized ( this.cache ) {
            if ( this.freeBuffers < this.cache.length ) {

                size = sfd.getInitialSize();
                resumeKey = rkresp.getResumeKey();

                // start with some reasonably safe defaults, the server will till us if it does not like it
                // can we resume this if we loose the file descriptor?

                int maxChunks = 256;
                int maxChunkSize = 1024 * 1024;

            }
        }

        if ( usage == 0 ) {
            synchronized ( this ) {
                log.debug("Usage dropped to zero, release session");
                if ( this.sessionAcquired.compareAndSet(true, false) ) {
                    this.session.release();
                }
            }
        }
        else if ( usage < 0 ) {
            log.error("Usage count dropped below zero " + this);

     * @since 2.1
     */
    boolean isUseRawNTLM ();


    /**
     * 
     * Property <tt>jcifs.smb.client.disablePlainTextPasswords</tt> (boolean, default true)
     * 
     * @return whether the usage of plaintext passwords is prohibited, defaults to false
     */
    boolean isDisablePlainTextPasswords ();


    /**
     * 
     * 

 * flags is necessary to distinguish which type of Named Pipe behavior
 * is desired.
 *
 * <p>
 * <table border="1" cellpadding="3" cellspacing="0" width="100%" summary="Usage examples">
 * <tr bgcolor="#ccccff">
 * <td colspan="2"><b><code>SmbNamedPipe</code> Constructor Examples</b></td>
 * <tr>
 * <td width="20%"><b>Code Sample</b></td>
 * <td><b>Description</b></td>
 * </tr>
 * <tr>