// A cross-domain policy file is an XML document that grants a web client, such as Adobe Flash Player
// or Adobe Acrobat (though not necessarily limited to these), permission to handle data across domains.
// When clients request content hosted on a particular source domain and that content make requests
// directed towards a domain other than its own, the remote domain needs to host a cross-domain

/**
 * A descriptor for a <i>discrete</i> {@code Comparable} domain such as all {@link Integer}
 * instances. A discrete domain is one that supports the three basic operations: {@link #next},
 * {@link #previous} and {@link #distance}, according to their specifications. The methods {@link
 * #minValue} and {@link #maxValue} should also be overridden for bounded types.
 *

/**
 * A descriptor for a <i>discrete</i> {@code Comparable} domain such as all {@link Integer}
 * instances. A discrete domain is one that supports the three basic operations: {@link #next},
 * {@link #previous} and {@link #distance}, according to their specifications. The methods {@link
 * #minValue} and {@link #maxValue} should also be overridden for bounded types.
 *

For a [distributed MinIO setup](https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html), where there are multiple pods with different domain names expected to run, you will either need wildcard certificates valid for all the domains or have specific certificates for each domain. If you are going to use specific certificates, make sure to create Kubernetes secrets accordingly.

        serverData.encryptionKeyLength = 8;
        response.flags2 = ServerMessageBlock.FLAGS2_UNICODE;
        byte[] domainNameBytes = "DOMAIN_U".getBytes("UTF-16LE");
        response.byteCount = 8 + domainNameBytes.length + 2; // key + domain + null terminator

        // Prepare byte array
        byte[] encryptionKey = "12345678".getBytes();
        ByteBuffer buffer = ByteBuffer.allocate(response.byteCount);

        byte[] badSid = new byte[10];
        badSid[1] = 101; // sub_authority_count > 100
        assertThrows(RuntimeCIFSException.class, () -> new SID(badSid, 0));
    }

    /**
     * Test constructor that combines a domain SID and an RID.
     *
     * @throws SmbException if the SID string is invalid
     */
    @Test
    void testDomainSidAndRidConstructor() throws SmbException {

func getResource(path string, host string, domains []string) (string, error) {
	if len(domains) == 0 {
		return path, nil
	}

	// If virtual-host-style is enabled construct the "resource" properly.
	xhost, err := xnet.ParseHost(host)
	if err != nil {
		return "", err
	}

	for _, domain := range domains {
		if xhost.Name == minioReservedBucket+"."+domain {
			continue
		}

    }

    @ParameterizedTest
    @DisplayName("Test valid domains")
    @ValueSource(strings = { "domain", "domain.local", "sub.domain.com", "domain-01", "domain_test" })
    void testValidDomains(String domain) {
        assertDoesNotThrow(() -> InputValidator.validateDomain(domain));
    }

    @Test
    @DisplayName("Test safe integer addition")
    void testSafeAddition() {

     * <p>
     * Specifically, if the SID has
     * been resolved and it is not a domain SID or builtin account,
     * the full DOMAIN\name form of the account will be
     * returned (e.g. MYDOM\alice or MYDOM\Domain Users).
     * If the SID has been resolved but it is is a domain SID,
     * only the domain name will be returned (e.g. MYDOM).
     * If the SID has been resolved but it is a builtin account,

     *            The hostname of the server that should be queried. For maximum efficiency this should be the hostname
     *            of a domain controller however a member server will work as well and a domain controller may not
     *            return names for SIDs corresponding to local accounts for which the domain controller is not an
     *            authority.
     * @param tc