if err != nil {
		logger.Fatal(err, "Invalid KMS configuration specified")
	}
	if !present {
		return
	}

	KMS, err := kms.Connect(GlobalContext, &kms.ConnectionOptions{
		CADir: globalCertsCADir.Get(),
	})
	if err != nil {
		logger.Fatal(err, "Failed to connect to KMS")
	}

	if _, err = KMS.GenerateKey(GlobalContext, &kms.GenerateKeyRequest{}); errors.Is(err, kms.ErrKeyNotFound) {

```
curl \
  -d "client_id=<YOUR_CLIENT_ID>" \
  -d "client_secret=<YOUR_CLIENT_SECRET>" \
  -d "grant_type=client_credentials" \
  "http://localhost:8080/auth/realms/{realm}/protocol/openid-connect/token"
```

The result will be a JSON document. To invoke the API you need to extract the value of the access_token property. You can then invoke the API by including the value in the Authorization header of requests to the API.

                        /*
                         * Some pipes may require that the hostname in the tree connect
                         * be the netbios name. So if we have the netbios server name
                         * from the NTLMSSP type 2 message, and the share is IPC$, we
                         * assert that the tree connect path uses the netbios hostname.
                         */

            this.handle.decode(_src);
            this.retval = _src.dec_ndr_long();
        }
    }

    /**
     * SAMR Connect4 operation for establishing a connection to the SAM database.
     * This is an enhanced version of Connect2 with additional parameters.
     */
    public static class SamrConnect4 extends DcerpcMessage {

        @Override
        public int getOpnum() {

            handle.decode(_src);
            retval = _src.dec_ndr_long();
        }
    }

    /**
     * SAMR Connect4 operation for establishing a connection to the SAM database.
     * This is an enhanced version of Connect2 with additional parameters.
     */
    public static class SamrConnect4 extends DcerpcMessage {

        @Override
        public int getOpnum() {

    @Nested
    class WhenHandlingConnections {

        @Test
        void testConnect() throws IOException {
            // Arrange
            doNothing().when(smbFile).connect();

            // Act
            smbFile.connect();

            // Assert - should not throw exception
        }

        @Test
        void testClose() {
            // Act
            smbFile.close();

        ChannelInfo channel = new ChannelInfo(channelId, transport, localIf, remoteIf);
        
        // Establish connection
        channel.setState(ChannelState.CONNECTING);
        transport.connect();
        
        // Perform channel binding
        performChannelBinding(channel);
        
        // Add to active channels
        channels.put(channelId, channel);

MINIO_POLICY_PLUGIN_AUTH_TOKEN    (string)    authorization header for plugin hook endpoint
MINIO_POLICY_PLUGIN_ENABLE_HTTP2  (bool)      Enable experimental HTTP2 support to connect to plugin service (default: 'off')
MINIO_POLICY_PLUGIN_COMMENT       (sentence)  optionally add a comment to this setting
```

	clientSecret string
)

func init() {
	flag.StringVar(&stsEndpoint, "sts-ep", "http://localhost:9000", "STS endpoint")
	flag.StringVar(&idpEndpoint, "idp-ep", "http://localhost:8080/auth/realms/minio/protocol/openid-connect/token", "IDP token endpoint")
	flag.StringVar(&clientID, "cid", "", "Client ID")
	flag.StringVar(&clientSecret, "csec", "", "Client secret")
}

func getTokenExpiry() (*credentials.ClientGrantsToken, error) {

import okhttp3.Address
import okhttp3.HttpUrl
import okhttp3.Route
import okhttp3.internal.canParseAsIpAddress
import okhttp3.internal.immutableListOf
import okhttp3.internal.toImmutableList

/**
 * Selects routes to connect to an origin server. Each connection requires a choice of proxy server,
 * IP address, and TLS mode. Connections may also be recycled.
 */
class RouteSelector(
  private val address: Address,