when(gssContext.getConfState()).thenReturn(false);
        when(gssContext.getIntegState()).thenReturn(false);

        int flags = ctx.getFlags();
        assertEquals(0, flags);
    }

    @Test
    @DisplayName("getFlags combines all flag bits when true")
    void getFlags_allTrue() {
        when(gssContext.getCredDelegState()).thenReturn(true);

// `traceHdrsS3HFlag`, otherwise both headers and body will be traced, causing
// high memory usage!
func s3APIMiddleware(f http.HandlerFunc, flags ...s3HFlag) http.HandlerFunc {
	// Collect all flags with bitwise-OR and assign operator
	var handlerFlags s3HFlag
	for _, flag := range flags {
		handlerFlags |= flag
	}

	// Get name of the handler using reflection.
	handlerName := getHandlerName(f, "objectAPIHandlers")

    /**
     * Constructs an SMB2 negotiate request with the specified configuration and security mode.
     *
     * @param config the configuration for this request
     * @param securityMode the security mode flags for negotiation
     */
    public Smb2NegotiateRequest(final Configuration config, final int securityMode) {
        super(config, SMB2_NEGOTIATE);
        this.securityMode = securityMode;

    public void testEncoding() {
        byte[] buffer = new byte[256];
        int encodedSize = context.encode(buffer, 0);

        assertTrue(encodedSize > 8); // Minimum size: count + padding + flags + algorithms
        assertEquals(context.size(), encodedSize);
    }

    @Test
    @DisplayName("Test context decoding")
    public void testDecoding() throws SMBProtocolDecodingException {
        // Encode first

            }
        }
    }

    @Override
    public SID[] getGroupMemberSids(final CIFSContext tc, final String authorityServerName, final jcifs.SID domsid, final int rid,
            final int flags) throws CIFSException {
        final lsarpc.LsarSidArray sidarray = new lsarpc.LsarSidArray();
        MsrpcGetMembersInAlias rpc = null;

        synchronized (this.sidCache) {

	typedef struct {
		[string] wchar_t *dfs_name;
	} DfsInfo200;

	typedef struct {
		uint32_t count;
		[size_is(count)] DfsInfo200 *s;
	} DfsEnumArray200;

	typedef struct {
		uint32_t flags;
		[string] wchar_t *dfs_name;
	} DfsInfo300;

	typedef struct {
		uint32_t count;
		[size_is(count)] DfsInfo300 *s;
	} DfsEnumArray300;

	typedef union {
		[case(1)] DfsEnumArray1 *info1;

        return this.extraSids;
    }

    /**
     * Returns the user account control flags.
     * @return the user account control value
     */
    public int getUserAccountControl() {
        return this.userAccountControl;
    }

    /**
     * Returns the user flags indicating PAC content.
     * @return the user flags value
     */
    public int getUserFlags() {
        return this.userFlags;
    }

            byte[] testBuffer = new byte[8];
            ByteBuffer bb = ByteBuffer.wrap(testBuffer).order(ByteOrder.LITTLE_ENDIAN);
            bb.putShort((short) 0); // pathConsumed (will be divided by 2)
            bb.putShort((short) 0); // numReferrals
            bb.putShort((short) 0); // tflags
            bb.putShort((short) 0); // tflags high bytes (skipped in decode)

 * and access permissions for SMB resources.
 */
public class SecurityDescriptor {

    SID owner_user, owner_group;
    /**
     * The type flags indicating security descriptor control flags.
     */
    public int type;
    /**
     * The array of access control entries (ACEs) in this security descriptor.
     */
    public ACE[] aces;

    /**

     * @return whether the specified mechanism is preferred
     */
    boolean isPreferredMech(ASN1ObjectIdentifier selectedMech);

    /**
     * Gets the negotiated context flags.
     * @return context flags
     */
    int getFlags();

    /**
     * Gets the array of supported security mechanism OIDs.
     * @return array of supported mechanism OIDs
     */