assertEquals(targetOffset, SMBUtil.readInt8(buffer, 8));
            assertEquals(length, SMBUtil.readInt4(buffer, 16));

            // Verify reserved section is zero
            assertEquals(0, SMBUtil.readInt4(buffer, 20));
        }

        @Test
        @DisplayName("Should handle multiple sequential encodings")
        void testMultipleSequentialEncodings() {

        buf.append(encodeText(text.getData()));
    }

    /**
     * Appends the string representation of a {@link CDATASection}.
     *
     * @param cdataSection
     *            The CDATA section. Must not be {@literal null}.
     * @param buf
     *            The string buffer. Must not be {@literal null}.
     */
    public static void appendCDATASection(final CDATASection cdataSection, final StringBuilder buf) {

        assertInstanceOf(SmbShareInfo.class, entries[1]);
        assertEquals("normal_share", entries[1].getName());
        assertEquals(8, entries[1].getType());
    }

    // Helper method to set DfsEnumArray using reflection
    private void setDfsEnumArray(MsrpcDfsRootEnum target, netdfs.DfsEnumArray200 array) throws Exception {
        Field eField = netdfs.DfsEnumStruct.class.getDeclaredField("e");
        eField.setAccessible(true);

        /*
         * The kerberos session key is not accessible via the JGSS API. IBM and
         * Oracle both implement a similar API to make an ExtendedGSSContext
         * available. That API is accessed via reflection to make this independent
         * of the runtime JRE
         */
        if (EXT_GSS_CONTEXT_CLASS == null || INQUIRE_SEC_CONTEXT == null || INQUIRE_TYPE_SESSION_KEY == null) {

     */
    public enum LoadBalancingStrategy {
        /** Round-robin distribution */
        ROUND_ROBIN,
        /** Least connections */
        LEAST_CONNECTIONS,
        /** Random selection */
        RANDOM,
        /** Failover only (use primary until failure) */
        FAILOVER_ONLY
    }

    /**
     * Represents a group of channels for a single session.
     */

        // Force accessibility and create instance to achieve coverage
        constructor.setAccessible(true);
        assertNotNull(constructor.newInstance(), "Should be able to create instance via reflection");
    }

    @Nested
    @DisplayName("Header Constants")
    class HeaderConstants {

        @Test
        @DisplayName("SMB2 header length should be 64 bytes")
        void testSmb2HeaderLength() {

    }

    /**
     * Deletes a related content item.
     *
     * @param form the edit form containing the ID of the item to delete
     * @return HTML response redirecting to the list page after deletion
     */
    @Execute
    @Secured({ ROLE })
    public HtmlResponse delete(final EditForm form) {
        verifyCrudMode(form.crudMode, CrudMode.DETAILS, this::asListHtml);

        // Absent key -> CIFSException
        CIFSException noKey = assertThrows(CIFSException.class, session::getSessionKey);
        assertTrue(noKey.getMessage().contains("No session key"));

        // Set a key via reflection and verify retrieval
        byte[] key = new byte[] { 1, 2, 3, 4 };
        setField(session, "sessionKey", key);
        assertArrayEquals(key, session.getSessionKey());
    }

    @Test

 * of the access check algorithm used by Windows is required. The following
 * is a basic description of the algorithm. For a more complete description
 * we recommend reading the section on Access Control in Keith Brown's
 * "The .NET Developer's Guide to Windows Security" (which is also
 * available online).
 * <p>
 * Direct ACEs are evaluated first in order. The SID of the user performing

         * the SMB_COM_SESSION_SETUP_ANDX Response (section 2.2.4.53.2), MUST be set to
         * 0x0000000000000000. For the SMB_COM_SESSION_SETUP_ANDX Response, the SecuritySignature
         * field of the SMB Header SHOULD<226> be set to the SecuritySignature received in the
         * SMB_COM_SESSION_SETUP_ANDX Request (section 2.2.4.53.1).
         */
        if (this.digest != null && getErrorCode() == 0) {