// Validate input parameters
        if (data == null) {
            throw new IllegalArgumentException("Data buffer cannot be null");
        }
        if (offset < 0 || length < 0) {
            throw new IllegalArgumentException("Offset and length must be non-negative");
        }
        if (offset + length > data.length) {
            throw new IllegalArgumentException("Offset + length exceeds data buffer size");
        }

        when(delegate.hasNext()).thenReturn(true, true, false);
        when(delegate.next()).thenReturn(entry1, entry2);
        when(filter.accept(resource)).thenThrow(new CIFSException("Error")).thenReturn(true);

        TestIterator iterator = new TestIterator(filter);

        // Verify iteration
        assertTrue(iterator.hasNext());
        assertSame(resource, iterator.next());

        final Map<String, Object> doc = new HashMap<>();
        // leave required fields empty

        final List<VaMessenger<FessMessages>> errorMessages = new ArrayList<>();
        AdminSearchlistAction.validateFields(doc, errorMessages::add);

        assertFalse(errorMessages.isEmpty());

        final FessMessages messages = new FessMessages();
        errorMessages.forEach(m -> m.message(messages));

            byte[] originalSalt = new byte[32];
            new Random(42).nextBytes(originalSalt);
            PreauthIntegrityNegotiateContext originalContext =
                    new PreauthIntegrityNegotiateContext(mockConfig, originalHashAlgos, originalSalt);

            int encoded = originalContext.encode(buffer, 0);

            PreauthIntegrityNegotiateContext decodedContext = new PreauthIntegrityNegotiateContext();

        byte[] zeroGuid = new byte[16];
        ValidateNegotiateInfoRequest request =
                new ValidateNegotiateInfoRequest(DEFAULT_CAPABILITIES, zeroGuid, DEFAULT_SECURITY_MODE, defaultDialects);

        byte[] buffer = new byte[request.size()];
        request.encode(buffer, 0);

        // Verify zero GUID
        byte[] extractedGuid = new byte[16];

        List<Map<String, Object>> documentList = new ArrayList<>();
        Map<String, Object> doc1 = new HashMap<>();
        doc1.put("title", "Doc1");
        Map<String, Object> doc2 = new HashMap<>();
        doc2.put("title", "Doc2");
        documentList.add(doc1);
        documentList.add(doc2);

        QueryResponseList qrList = new QueryResponseList(documentList, 0, 10, 0);

    @Test
    public void test_processDirectMemberOf_collectsGroupIds() throws Exception {
        EntraIdAuthenticator authenticator = new EntraIdAuthenticator();

        List<String> groupList = new ArrayList<>();
        List<String> roleList = new ArrayList<>();
        List<String> groupIdsForParentLookup = new ArrayList<>();

        // Call with invalid URL - should handle gracefully

  }

  public void testFailStart() throws Exception {
    Service a = new NoOpService();
    Service b = new FailStartService();
    Service c = new NoOpService();
    Service d = new FailStartService();
    Service e = new NoOpService();
    ServiceManager manager = new ServiceManager(asList(a, b, c, d, e));
    RecordingListener listener = new RecordingListener();
    manager.addListener(listener, directExecutor());

        List<QuerySearchResult> shards = new ArrayList<>();
        for (int i = 0; i < candidateList.size(); i++) {
            QuerySearchResult result = new QuerySearchResult();
            result.setShardIndex(i);
            result.from(0);
            result.size(0);
            result.topDocs(
                new TopDocsAndMaxScore(

	}
	if len(extKey) != 32 { // safety check
		logger.CriticalIf(context.Background(), errors.New("crypto: invalid key length"))
	}
	var nonce [32]byte
	if _, err := io.ReadFull(random, nonce[:]); err != nil {
		logger.CriticalIf(context.Background(), errOutOfEntropy)
	}

	const Context = "object-encryption-key generation"
	mac := hmac.New(sha256.New, extKey)
	mac.Write([]byte(Context))
	mac.Write(nonce[:])
	mac.Sum(key[:0])
	return key