class KerberosPacAuthDataTest {

    private Map<Integer, KerberosKey> keys;

    @BeforeEach
    void setUp() {
        keys = new HashMap<>();
    }

    // Test successful PAC creation with mocked Pac construction
    @Test
    void testConstructorSuccess() throws PACDecodingException {
        // Setup key
        byte[] keyBytes = new byte[32];

        assertTrue(ex.getMessage().contains("failed"));
        verify(transport).hasCapability(42);
    }

    // Edge: disconnected status toggles
    @ParameterizedTest
    @DisplayName("isDisconnected reflects current mocked state")
    @ValueSource(booleans = { true, false })
    void isDisconnected_states(boolean disconnected) {
        when(transport.isDisconnected()).thenReturn(disconnected);

        assertEquals("sig check failed", ex.getMessage());
        verify(handle).areSignaturesActive();
    }

    @Test
    @DisplayName("getSession(): returns the mocked SmbSession instance")
    void getSession_returnsMock() {
        // Arrange
        SmbSession session = mock(SmbSession.class);
        when(handle.getSession()).thenReturn(session);

        // Act

        lenient().when(gssManager.createName(anyString(), any())).thenReturn(serviceName);
        lenient().when(gssManager.createContext(any(), any(), any(), anyInt())).thenReturn(gssContext);

        // Create Kerb5Context with mocked dependencies
        ctx = new Kerb5Context("host.example", "cifs", null, 0, 0, null);
    }

    @AfterEach
    void tearDown() {
        if (mockedStatic != null) {
            mockedStatic.close();
        }

     *
     * Property {@code jcifs.smb.client.soTimeout} (int, default 35000)
     *
     * @return socket timeout, in milliseconds
     */
    int getSoTimeout();

    /**
     *
     * Property {@code jcifs.smb.client.connTimeout} (int, default 35000)
     *
     * @return timeout for establishing a socket connection, in milliseconds
     */
    int getConnTimeout();

    /**

import jcifs.CIFSException;

/**
 * JAAS kerberos authenticator
 *
 * Either configure JAAS for credential caching or reuse a single instance of this authenticator -otherwise you won't
 * get proper ticket caching.
 *
 * Be advised that short/NetBIOS name usage is not supported with this authenticator. Always specify full FQDNs/Realm.

            // Create a mock exception that could have circular reference
            Exception rootCause = mock(Exception.class);
            when(rootCause.getMessage()).thenReturn("Mocked exception");

            TransportException exception = new TransportException("Test", rootCause);

            assertEquals(rootCause, exception.getRootCause());
            // toString should not cause infinite loop

        // RPC endpoint mapper port and connection timeout
        final int RPC_ENDPOINT_PORT = 135;
        final int RPC_CONNECT_TIMEOUT_MS = 5000;

        try (Socket socket = new Socket()) {
            socket.connect(new InetSocketAddress(address, RPC_ENDPOINT_PORT), RPC_CONNECT_TIMEOUT_MS);
            return true;
        } catch (IOException e) {
            return false;
        }
    }

    @Mock
    Configuration mockCfg;

    // Provides a fresh handler instance for tests
    private Handler newHandler() {
        return new Handler();
    }

    // Provides a handler wired with a mocked CIFSContext
    private Handler newHandlerWith(CIFSContext ctx) {
        return new Handler(ctx);
    }

    @Test
    @DisplayName("getDefaultPort returns SMB default port")
    void testGetDefaultPort() {

import org.opensearch.search.aggregations.bucket.filter.FilterAggregationBuilder;
import org.opensearch.search.aggregations.bucket.global.GlobalAggregationBuilder;
import org.opensearch.search.aggregations.bucket.histogram.HistogramAggregationBuilder;
import org.opensearch.search.aggregations.bucket.missing.MissingAggregationBuilder;
import org.opensearch.search.aggregations.bucket.range.IpRangeAggregationBuilder;