@Test
    @DisplayName("Test LABEL_SECURITY_INFO constant value")
    void testLabelSecurityInfo() {
        assertEquals(0x10, SecurityInfo.LABEL_SECURITY_INFO);
    }

    @Test
    @DisplayName("Test ATTRIBUTE_SECURITY_INFO constant value")
    void testAttributeSecurityInfo() {
        assertEquals(0x20, SecurityInfo.ATTRIBUTE_SECURITY_INFO);
    }

    @Test
    @DisplayName("Test SCOPE_SECURITY_INFO constant value")

        filter.init(filterConfig);

        // Test NTLM Type 1 message handling
        byte[] type1Message = new byte[] { 0x4E, 0x54, 0x4C, 0x4D, 0x53, 0x53, 0x50, 0x00, 0x01, 0x00, 0x00, 0x00 };
        String authHeader = "NTLM " + new String(org.bouncycastle.util.encoders.Base64.encode(type1Message));

        when(request.getHeader("Authorization")).thenReturn(authHeader);

    void byteArrayConstructor_malformedDER_throwsWrapped() {
        // Arrange: Truncated SEQUENCE (0x30 len=2 but only 1 byte of content)
        byte[] malformed = new byte[] { 0x30, 0x02, 0x01 };

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(malformed, null));

        int written = trans2SetFileInfo.writeSetupWireFormat(buffer, 0);

        // Should write 2 bytes: subcommand and 0x00
        assertEquals(2, written);
        assertEquals(SmbComTransaction.TRANS2_SET_FILE_INFORMATION, buffer[0]);
        assertEquals(0x00, buffer[1]);
    }

    @Test
    @DisplayName("Test writeSetupWireFormat with offset")
    void testWriteSetupWireFormatWithOffset() {

        assertNull(serverData.guid);
    }

    /**
     * Test setting and getting byte field (sflags)
     */
    @ParameterizedTest
    @ValueSource(bytes = { 0x00, 0x01, 0x7F, (byte) 0x80, (byte) 0xFF })
    @DisplayName("Test sflags field with various byte values")
    public void testSflagsField(byte value) {
        // When
        serverData.sflags = value;

        // Then

            // Since FLAGS2_RESOLVE_PATHS_IN_DFS is 0x1000, when cast to byte it becomes 0
            // Therefore the method will always return false unless flags has all 0x00 bits set
            // This test verifies actual behavior
            testBlock.setFlags((byte) 0x00);
            assertFalse(testBlock.isResolveInDfs());

            // The correct implementation should check flags2, not flags

            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // TreeId / AsyncId
            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // SessionId
            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // Signature
            (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, (byte) 0x00, // Signature

        int[] attributeFlags = { 0x01, // FILE_ATTRIBUTE_READONLY
                0x02, // FILE_ATTRIBUTE_HIDDEN
                0x04, // FILE_ATTRIBUTE_SYSTEM
                0x10, // FILE_ATTRIBUTE_DIRECTORY
                0x20, // FILE_ATTRIBUTE_ARCHIVE
                0x80, // FILE_ATTRIBUTE_NORMAL
                0x100, // FILE_ATTRIBUTE_TEMPORARY
                0x21, // Combination: ARCHIVE | READONLY

        buffer[42] = 0x00;

        // Parameter displacement (2 bytes)
        buffer[43] = 0x00;
        buffer[44] = 0x00;

        // Data count (2 bytes)
        buffer[45] = 0x00;
        buffer[46] = 0x00;

        // Data offset (2 bytes)
        buffer[47] = 0x00;
        buffer[48] = 0x00;

        // Data displacement (2 bytes)
        buffer[49] = 0x00;
        buffer[50] = 0x00;

     * @return the SID for this ACE
     */
    public SID getSID() {
        return sid;
    }

    int decode(final byte[] buf, int bi) {
        allow = buf[bi] == (byte) 0x00;
        bi++;
        flags = buf[bi++] & 0xFF;
        final int size = ServerMessageBlock.readInt2(buf, bi);
        bi += 2;
        access = ServerMessageBlock.readInt4(buf, bi);
        bi += 4;
        sid = new SID(buf, bi);