// + 4 byte (== r bits) big endian encoding of L
        suffix[suffix.length - 1] = (byte) 128;

        final DerivationParameters param = new KDFCounterParameters(sessionKey, null /* prefix */, suffix /* suffix */, r /* r */);
        gen.init(param);

        final byte[] derived = new byte[16];
        gen.generateBytes(derived, 0, 16);
        return derived;
    }

    /**

    }

    private static class TestSystemHelper extends SystemHelper {
        File tempFile;

        @Override
        public File createTempFile(String prefix, String suffix) {
            try {
                tempFile = File.createTempFile(prefix, suffix);
                tempFile.deleteOnExit();
                return tempFile;
            } catch (IOException e) {
                throw new RuntimeException(e);

     * Constructor.
     */
    public SamlAuthenticator() {
        super();
    }

    private static final Logger logger = LogManager.getLogger(SamlAuthenticator.class);

    /**
     * The prefix for SAML properties.
     */
    protected static final String SAML_PREFIX = "saml.";

    /**
     * The key for the SAML state in the session.
     */

        if (option == null) {
            throw new IllegalStateException("No option is associated to this path type.");
        }
        String prefix = (moduleName == null) ? "" : (moduleName + '=');
        StringJoiner joiner = new StringJoiner(File.pathSeparator, prefix, "");
        joiner.setEmptyValue("");
        for (Path p : paths) {
            joiner.add(p.toString());
        }

	cachesRoot map[string][]string `msg:"-"`

	// Internal state
	mu      sync.RWMutex `msg:"-"`
	updated bool         `msg:"-"`
}

type deleteAllStorager interface {
	deleteAll(ctx context.Context, bucket, prefix string)
}

// newBucketMetacache creates a new bucketMetacache.
// Optionally remove all existing caches.
func newBucketMetacache(bucket string, cleanup bool) *bucketMetacache {
	if cleanup {

  source ./ci/official/utilities/windows.sh
  echo 'Converting MSYS Linux-like paths to Windows paths (for Docker, Python, etc.)'
  source <(python ./ci/official/utilities/convert_msys_paths_to_win_paths.py --whitelist-prefix TFCI_)
fi

# Run all "tfrun" commands under Docker. See setup_docker.sh for details
if [[ "$TFCI_DOCKER_ENABLE" == 1 ]]; then
  source ./ci/official/utilities/setup_docker.sh
fi

        assertEquals(1, result.get(ConfigName.SCRIPT).size());
        assertEquals(1, result.get(ConfigName.FIELD).size());

        // Test with parameters that don't match any prefix
        configParameters = "unknown.param=value\nother=value2";
        result = ParameterUtil.createConfigParameterMap(configParameters);
        for (Map<String, String> map : result.values()) {

        assertEquals("web", crawlingInfoHelper.getCanonicalSessionId("web-config-789"));
        assertEquals("", crawlingInfoHelper.getCanonicalSessionId("-suffix"));
        assertEquals("prefix", crawlingInfoHelper.getCanonicalSessionId("prefix-"));
        assertEquals("multi", crawlingInfoHelper.getCanonicalSessionId("multi-part-session"));
    }

    @Test
    public void test_putToInfoMap() {
        // Test initial null map

                    this.handle = this.pipe.openUnshared(this.openFlags, this.access, this.sharing, SmbConstants.ATTR_NORMAL, 0);
                } else {
                    // at least on samba, SmbComOpenAndX fails without the pipe prefix
                    this.handle = this.pipe.openUnshared("\\pipe" + getUncPath(), this.openFlags, this.access, this.sharing,
                            SmbConstants.ATTR_NORMAL, 0);
                }

		} else {
			args[key] = values
		}
	}

	// JWT specific values
	//
	// Add all string claims
	for k, v := range claims {
		vStr, ok := v.(string)
		if ok {
			// Trim any LDAP specific prefix
			args[strings.ToLower(strings.TrimPrefix(k, "ldap"))] = []string{vStr}
		}
	}

	// Add groups claim which could be a list. This will ensure that the claim
	// `jwt:groups` works.