if (auth.hashesExternal && NtlmPasswordAuthentication.DEFAULT_PASSWORD != NtlmPasswordAuthentication.BLANK) {
                                /* preauthentication
                                 */
                                transport.getSmbSession(NtlmPasswordAuthentication.DEFAULT)
                                        .getSmbTree(LOGON_SHARE, null)

     * @param resp The response.
     * @param challenge The domain controller challenge.
     * @return the authenticated NtlmPasswordAuthentication object
     * @throws IOException If an IO error occurs.
     * @throws ServletException If an error occurs.
     */
    public NtlmPasswordAuthentication doAuthentication(final HttpServletRequest req, final HttpServletResponse resp, final byte[] challenge)

        }

        @Override
        public HashMap getTrustedDomains(NtlmPasswordAuthentication auth) throws SmbAuthException {
            if (disabled || auth.domain == "?")
                return null;
            return super.getTrustedDomains(auth);
        }

        @Override
        public SmbTransport getDc(String domain, NtlmPasswordAuthentication auth) throws SmbAuthException {
            if (disabled)

import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpSession;
import jcifs.smb1.Config;
import jcifs.smb1.UniAddress;
import jcifs.smb1.netbios.NbtAddress;
import jcifs.smb1.smb1.NtlmPasswordAuthentication;
import jcifs.smb1.smb1.SmbAuthException;
import jcifs.smb1.smb1.SmbSession;
import jcifs.smb1.util.Base64;

/**
 * This servlet may be used with pre-2.3 servlet containers

        }
        return (capabilities & cap) == cap;
    }

    boolean isSignatureSetupRequired(final NtlmPasswordAuthentication auth) {
        return (flags2 & SmbConstants.FLAGS2_SECURITY_SIGNATURES) != 0 && digest == null && auth != NtlmPasswordAuthentication.NULL
                && !NtlmPasswordAuthentication.NULL.equals(auth);
    }

    void ssn139() throws IOException {

     * @throws IOException
     */
    @Test
    public void testAuthenticate_Type3Message() throws IOException {
        // Setup: "Authorization" header with a Type 3 message
        when(mockRequest.getHeader("Authorization")).thenReturn("NTLM " + type3MessageBase64);

        // Execute

        ntlmServlet.service(request, response);

        ArgumentCaptor<NtlmPasswordAuthentication> authCaptor = ArgumentCaptor.forClass(NtlmPasswordAuthentication.class);
        verify(session).setAttribute(eq("NtlmHttpAuth"), authCaptor.capture());

        NtlmPasswordAuthentication capturedAuth = authCaptor.getValue();
        assertEquals("user", capturedAuth.getUsername());

     * @throws ServletException if a servlet error occurs
     */
    protected NtlmPasswordAuthentication negotiate(final HttpServletRequest req, final HttpServletResponse resp,
            final boolean skipAuthentication) throws IOException, ServletException {
        UniAddress dc;
        String msg;
        NtlmPasswordAuthentication ntlm = null;
        msg = req.getHeader("Authorization");

        Properties props = new Properties();
        props.setProperty("jcifs.smb.client.domain", "TEST_DOMAIN");
        CIFSContext context = new BaseContext(new PropertyConfiguration(props));
        NtlmPasswordAuthentication auth = new NtlmPasswordAuthentication(context, "TEST_DOMAIN", "user", "pass");

        when(httpSession.getAttribute("NtlmHttpAuth")).thenReturn(auth);

        filter.doFilter(request, response, filterChain);

        capabilities = session.transport.capabilities;

        if (session.transport.server.security == SECURITY_USER) {
            if (cred instanceof final NtlmPasswordAuthentication auth) {
                if (auth == NtlmPasswordAuthentication.ANONYMOUS) {
                    lmHash = new byte[0];
                    ntHash = new byte[0];
                    capabilities &= ~SmbConstants.CAP_EXTENDED_SECURITY;