protected boolean useLargeReadWrite = true;
    /** LAN Manager compatibility level for authentication */
    protected int lanmanCompatibility = 3;
    /** Whether to allow fallback to NTLM authentication */
    protected boolean allowNTLMFallback = true;
    /** Whether to use raw NTLM authentication without SPNEGO */
    protected boolean useRawNTLM = false;

    }

    /**
     * Gets the path by trying multiple locations in order of preference.
     * First tries to get the real path from servlet context, then checks various
     * fallback locations including source and target directories.
     *
     * @param root the root directory (e.g., "WEB-INF/")
     * @param base the base directory under root (e.g., "conf", "classes")

        case WitnessAsyncNotifyMessage.WitnessNotificationMessage.WITNESS_IP_CHANGE:
            return WitnessEventType.IP_CHANGE;
        default:
            return WitnessEventType.RESOURCE_CHANGE; // Default fallback
        }
    }

            // Process asynchronously or synchronously based on configuration
            if (asyncLogging && !shutdown) {
                if (!logQueue.offer(entry)) {
                    // Queue is full, log synchronously as fallback
                    processLogEntry(entry);
                    returnAuditEntry(entry);
                }
            } else {
                processLogEntry(entry);
                returnAuditEntry(entry);

        }

        if (isSearchField(field)) {
            return fieldBuilder.buildQuery(field, text, boost);
        }

        // Fallback: treat as default field query
        context.addFieldLog(Constants.DEFAULT_FIELD, text);
        return buildDefaultQueryBuilder(fessConfig, context, defaultBuilder);
    }

        assertTrue(handle.areSignaturesActive());

        verify(session, times(4)).close();
        verify(transport, times(4)).close();
    }

    @Test
    @DisplayName("isSMB2 true and exception fallback to false")
    void isSMB2Cases() throws Exception {
        // Happy path returns true; transport exception path returns false
        when(transport.isSMB2()).thenReturn(true);
        assertTrue(handle.isSMB2());

        if (startBracket != -1 && endBracket != -1 && endBracket > startBracket) {
            return transportStr.substring(startBracket + 1, endBracket);
        }
        // Fallback: just use address
        return transport.getRemoteAddress().getHostAddress();
    }

    /**
     * Get connection key from address and port
     */

        try (SmbSessionImpl treesess = t.getSession()) {
            if (treesess.getCredentials().isAnonymous() || treesess.getCredentials().isGuest()) {
                // refresh anonymous session or fallback to anonymous from guest login
                try (SmbSessionInternal s =
                        trans.getSmbSession(this.ctx.withAnonymousCredentials(), treesess.getTargetHost(), treesess.getTargetDomain())

            if (entry.getInconsistencyCount() > 5) {
                entry.invalidate();
            }
        }
    }
}
```

### 9.2 Fallback Mechanisms
```java
public class DirectoryOperationFallback {
    public SmbFile[] safeListFiles(SmbFile directory) throws IOException {
        try {
            // Try cached listing first

        return getSystemPropertyAsInt(Constants.LTR_WINDOW_SIZE_PROPERTY, 100);
    }

    /**
     * Gets the permission fields for Entra ID authentication.
     * Uses new entraid.permission.fields key with fallback to legacy aad.permission.fields.
     * @return Array of permission field names.
     */
    default String[] getEntraIdPermissionFields() {
        String value = getSystemProperty("entraid.permission.fields", null);