}

    /**
     * Construct a SID from a domain SID and an RID
     * (relative identifier). For example, a domain SID
     * {@code S-1-5-21-1496946806-2192648263-3843101252} and RID {@code 1029} would
     * yield the SID {@code S-1-5-21-1496946806-2192648263-3843101252-1029}.
     */
    /**
     * Construct a SID from a domain SID and an RID (relative identifier).
     *
     * @param domsid the domain SID

			[in] uint32_t acct_flags,
			[out,unique] SamrSamArray *sam,
			[out] uint32_t num_entries);

	[op(0x1b)]
	int SamrOpenAlias([in] policy_handle *domain_handle,
			[in] uint32_t access_mask,
			[in] uint32_t rid,
			[out] policy_handle *alias_handle);

	[op(0x21)]
	int SamrGetMembersInAlias([in] policy_handle *alias_handle,
			[out] LsarSidArray *sids);

	typedef [v1_enum] enum {
		SE_GROUP_MANDATORY          = 0x00000001,

     * Construct a SID from a domain SID and an RID
     * (relative identifier). For example, a domain SID
     * {@code S-1-5-21-1496946806-2192648263-3843101252} and RID {@code 1029} would
     * yield the SID {@code S-1-5-21-1496946806-2192648263-3843101252-1029}.
     *
     * @param domsid the domain SID
     * @param rid the relative identifier
     */
    public SID(final SID domsid, final int rid) {
        this.revision = domsid.revision;

     * @param domsid the domain SID
     * @param rid the group RID
     * @param flags resolution flags
     * @return the SIDs of the group members
     * @throws CIFSException if there is an error retrieving group members
     */
    SID[] getGroupMemberSids(CIFSContext tc, String authorityServerName, SID domsid, int rid, int flags) throws CIFSException;

    /**

    /**
     * Gets the domain SID for this SID.
     *
     * @return domain SID
     */
    SID getDomainSid();

    /**
     * Get the RID
     *
     * This is the last subauthority identifier
     *
     * @return the RID
     */
    int getRid();

    /**
     * Return a String representing this SID ideal for display to
     * users. This method should return the same text that the ACL

    class SamrRidWithAttributeTests {

        @Test
        @DisplayName("Should encode RID with attribute correctly")
        void testEncode() throws NdrException {
            // Given: RID with attribute
            samr.SamrRidWithAttribute ridWithAttribute = new samr.SamrRidWithAttribute();
            ridWithAttribute.rid = 100;
            ridWithAttribute.attributes = 200;

            // When: Encoding

    class SamrRidWithAttributeTests {

        @Test
        @DisplayName("Should encode RID with attribute correctly")
        void testEncode() throws NdrException {
            // Given: RID with attribute
            samr.SamrRidWithAttribute ridWithAttribute = new samr.SamrRidWithAttribute();
            ridWithAttribute.rid = 100;
            ridWithAttribute.attributes = 200;

            // When: Encoding

        }

        @Test
        @DisplayName("getGroupMemberSids: group types call resolver with domainSid and rid")
        void testGetGroupMemberSidsGroup() throws Exception {
            byte[] ident = new byte[] { 0, 0, 0, 0, 0, 5 };
            // Build a group SID with domain name and RID 512
            SID group = new SID(buildSidT((byte) 1, ident, 10, 20, 512), jcifs.SID.SID_TYPE_DOM_GRP, "DOM", "Domain Admins", false);

    public void testReadId() throws IOException, PACDecodingException {
        // RID = 0x12345678 (305419896 in decimal, little-endian)
        byte[] data = new byte[] { 0x78, 0x56, 0x34, 0x12 };
        PacDataInputStream pdis = createInputStream(data);
        SID sid = pdis.readId();
        // The readId method creates a SID with authority 5 and the RID value
        // Expected format: S-1-5-305419896

		SID_NAME_INVALID  = 7, /* invalid account */
		SID_NAME_UNKNOWN  = 8  /* oops. */
	} LsarSidType;

	typedef struct {
		LsarSidType sid_type;
		uint32_t rid;
		uint32_t sid_index;
	} LsarTranslatedSid;

	typedef struct {
		[range(0,1000)] uint32_t count;
		[size_is(count)] LsarTranslatedSid *sids;
	} LsarTransSidArray;

	typedef struct {
		unicode_string name;