// Clone and verify basic fields copied
        JAASAuthenticator copy = (JAASAuthenticator) orig.clone();
        assertEquals(orig.getUsername(), copy.getUsername());
        assertEquals(orig.getUserDomain(), copy.getUserDomain());
        assertEquals(orig.getPassword(), copy.getPassword());

        // Test the cloning behavior with both null and non-null cached subjects
        if (first != null) {

     * {@inheritDoc}
     *
     * @see java.lang.Object#hashCode()
     */
    @Override
    public int hashCode() {
        return super.hashCode();
    }

    @Override
    public String getUserDomain() {
        if (this.realm == null && this.getSubject() != null) {
            Set<Principal> pr = this.getSubject().getPrincipals();
            for (Iterator<Principal> ite = pr.iterator(); ite.hasNext();) {

    private Map<String, Map<String, CacheEntry<DfsReferralDataInternal>>> getTrustedDomains(final CIFSContext tf) throws SmbAuthException {
        if (tf.getConfig().isDfsDisabled() || tf.getCredentials().getUserDomain() == null
                || tf.getCredentials().getUserDomain().isEmpty()) {
            return null;
        }

        if (this._domains != null && System.currentTimeMillis() > this._domains.expiration) {
            this._domains = null;

        when(auth.isAnonymous()).thenReturn(true);
        when(auth.isGuest()).thenReturn(true);
        when(auth.getUsername()).thenReturn("guest");
        when(auth.getUserDomain()).thenReturn("dom");

        // Construct
        SmbComSessionSetupAndX obj = new SmbComSessionSetupAndX(mockContext, mockNegotiate, mockAndX, auth);
        String accountName = (String) getField(obj, "accountName");

        }

        @Override
        public boolean isAnonymous() {
            return false; // not anonymous for test purposes
        }

        @Override
        public String getUserDomain() {
            return "TESTDOMAIN"; // test domain for test purposes
        }

        @Override
        public <T extends Credentials> T unwrap(Class<T> type) {
            if (type.isInstance(this)) {

        NtlmPasswordAuthentication capturedAuth = authCaptor.getValue();
        assertEquals("user", capturedAuth.getUsername());
        assertEquals("TEST_DOMAIN", capturedAuth.getUserDomain());

        verify(response, never()).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }

    /**
     * Test the service method with an existing valid session.

                return;
            }
            final HttpSession ssn = request.getSession();
            ssn.setAttribute("NtlmHttpAuth", ntlm);
            ssn.setAttribute("ntlmdomain", ntlm.getUserDomain());
            ssn.setAttribute("ntlmuser", ntlm.getUsername());
        } else {
            final HttpSession ssn = request.getSession(false);
            if (ssn == null || ssn.getAttribute("NtlmHttpAuth") == null) {

        when(mockConfig.getPid()).thenReturn(1234);
        when(mockCifsContext.getConfig()).thenReturn(mockConfig);

        // Mock credentials to prevent NPE
        when(mockCredentials.getUserDomain()).thenReturn("DOMAIN");
        when(mockCifsContext.getCredentials()).thenReturn(mockCredentials);

        // Create URL handler
        Handler urlHandler = new jcifs.smb.Handler(mockCifsContext);

        // Verify
        assertNotNull(result, "Authentication result should not be null");
        assertEquals("DOMAIN", result.getUserDomain());
        assertEquals("user", result.getUsername());
        // Cannot verify challenge and responses as they are not exposed in the API

        when(config.isTraceResourceUsage()).thenReturn(false);
        // Mock credentials to avoid NullPointerException
        when(ctx.getCredentials()).thenReturn(credentials);
        when(credentials.getUserDomain()).thenReturn("DOMAIN");
        // Mock DFS resolver
        when(ctx.getDfs()).thenReturn(dfsResolver);
    }

    // Helper to set private field 'tree'