}

    @Test
    @DisplayName("Test user flags using mock")
    void testUserFlags() throws Exception {
        PacLogonInfo logonInfo = mock(PacLogonInfo.class);

        // Test with extra SIDs flag
        when(logonInfo.getUserFlags()).thenReturn(PacConstants.LOGON_EXTRA_SIDS);
        assertEquals(PacConstants.LOGON_EXTRA_SIDS, logonInfo.getUserFlags());

        // Test with resource groups flag

         * techinque that NTLMv2 specifically thwarts. A real NTLM Filter would
         * need to do a NETLOGON RPC that JCIFS will likely never implement
         * because it requires a lot of extra crypto not used by CIFS.
         */
        Config.setProperty("jcifs.smb1.smb.lmCompatibility", "0");
        Config.setProperty("jcifs.smb1.smb.client.useExtendedSecurity", "false");

        verify(signingDigest, times(1)).verify(testData, offset, length, extraPad, message);
    }

    @ParameterizedTest
    @ValueSource(ints = { 0, 1, 2, 4, 8, 16 })
    @DisplayName("Test verify method with different extra padding values")
    void testVerifyWithDifferentExtraPadding(int extraPad) {
        // Arrange
        int offset = 0;
        int length = testData.length;

        assertTrue(secondBufferFormatIndex > 0, "Second buffer format byte not found");
        assertEquals((byte) 0x04, dst[secondBufferFormatIndex]);
        assertEquals((byte) 0x00, dst[secondBufferFormatIndex + 1]); // Extra null byte for Unicode alignment
    }

    /**
     * Test writeBytesWireFormat with empty file names
     */
    @Test
    @DisplayName("Test writeBytesWireFormat with empty file names")

        byte[] fileNameBytes = fileName.getBytes(StandardCharsets.UTF_16LE);
        int totalSize = 12 + fileNameBytes.length + 50; // Extra space for safety
        byte[] buffer = new byte[totalSize];

        // Write next entry offset (4 bytes)
        SMBUtil.writeInt4(nextOffset, buffer, 0);

        // Write action (4 bytes)

        SecurityBlob longer = new SecurityBlob(new byte[] { 1, 2, 9 });

        // Act & Assert
        // Due to implementation, iteration uses this.b.length and ignores extra bytes in argument
        assertTrue(shorter.equals(longer), "Shorter equals longer when prefix matches (implementation behavior)");

        // In the opposite direction, an out-of-bounds occurs internally and is caught as false

            newValue = newValue.replace(element, replacement);
        }
        return newValue;
    }

    /**
     * Builds the complete query string from the configured parameters.
     * Combines base query, extra queries, field filters, and sort field into a single query string.
     *
     * @return the complete formatted query string
     */
    public String build() {

        assertEquals(4, impl.getBuffer().length);
    }

    // Capacity behavior: when full, additional releases are dropped; only cached buffers are returned
    @Test
    @DisplayName("Cache capacity respected: extra releases dropped; retrieval order by first free slot")
    void cacheCapacityAndRetrievalOrder() {
        BufferCacheImpl impl = new BufferCacheImpl(2, 3);
        byte[] a = new byte[1];
        byte[] c = new byte[2];

        Thread.sleep(100);

        // Create additional update index (making 2 total)
        final String updateAlias = suggester.getIndex() + ".update";
        final String extraIndexName = suggester.getIndex() + ".extra";

        client.admin().indices().prepareCreate(extraIndexName).execute().actionGet();
        client.admin().indices().prepareAliases().addAlias(extraIndexName, updateAlias).execute().actionGet();
        Thread.sleep(100);

        /* Samba has a tendency to return referral paths and pathConsumed values
         * in such a way that there can be a slash at the end of the path. This
         * causes problems matching keys in resolve() where an extra slash causes
         * a mismatch. This strips trailing slashes from all keys to eliminate
         * this problem.
         */
        int ki = key.length();
        while (ki > 1 && key.charAt(ki - 1) == '\\') {