writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrAddUserInvalidArgument), r.URL)
		return
	}

	if (cred.IsTemp() || cred.IsServiceAccount()) && cred.ParentUser == accessKey {
		// Incoming access key matches parent user then we should
		// reject password change requests.
		writeErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrAddUserInvalidArgument), r.URL)
		return
	}

			if err != nil {
				return nil, err
			}

			// Set the parent of the temporary access key, this is useful
			// in obtaining service accounts by this cred.
			cred.ParentUser = lookupResult.NormDN

			// Set this value to LDAP groups, LDAP user can be part
			// of large number of groups
			cred.Groups = targetGroups

```

#### 4.2 Implementation Tasks
- [ ] Extend lease implementation for directories
- [ ] Implement directory metadata caching
- [ ] Add directory change notification integration
- [ ] Create parent-child lease relationships
- [ ] Implement directory lease break handling
- [ ] Add directory enumeration caching

#### 4.3 Integration Points
- Extend `SmbFile` for directory lease support

        assertEquals(0, msrpcShareGetInfo.getPtype());
        assertEquals(DcerpcConstants.DCERPC_FIRST_FRAG | DcerpcConstants.DCERPC_LAST_FRAG, msrpcShareGetInfo.getFlags());

        // Verify parent class initialization
        assertNotNull(msrpcShareGetInfo.info);
        assertTrue(msrpcShareGetInfo.info instanceof srvsvc.ShareInfo502);
        assertEquals(502, msrpcShareGetInfo.level);

     * Get the source field.
     *
     * @return InputSource
     */
    public InputSource getSource() {
        return this.source;
    } // -- InputSource getSource()

    /**
     * Gets the parent InputLocation where this InputLocation may have been imported from.
     * Can return {@code null}.
     *
     * @return InputLocation
     * @since 4.0.0
     */
    public InputLocation getImportedFrom() {

                        project.getCollectedProjects().forEach(p -> {
                            // 1. Child's phase start waits for parent's phase start
                            plan.step(p, BEFORE + n2).ifPresent(before::executeBefore);
                            // 2. Parent's phase completion waits for child's phase completion
                            plan.step(p, AFTER + n2).ifPresent(after::executeAfter);

        }

        @Test
        @DisplayName("Should throw NullPointerException with null configuration")
        void testConstructorWithNullConfig() {
            // The parent class requires a non-null configuration for getPid()
            assertThrows(NullPointerException.class, () -> {
                new Trans2GetDfsReferralResponse(null);
            });
        }
    }

    @Nested

        assertEquals(0, getFieldValue(netShareEnum, "setupCount"));
        assertEquals(5000, getFieldValue(netShareEnum, "timeout"));

        // Verify command and subcommand from parent class
        assertEquals(SmbComTransaction.SMB_COM_TRANSACTION, getFieldValue(netShareEnum, "command"));
        assertEquals(SmbComTransaction.NET_SHARE_ENUM, netShareEnum.getSubCommand());
    }

    @Test

        final Path parentPath = parentFile.toPath();
        try {
            Files.createDirectories(parentPath);
        } catch (final IOException e) {
            logger.warn("Failed to create parent directory: {}", parentFile.getAbsolutePath(), e);
            return false;
        }

        return process(thumbnailId, responseData -> {
            final String mimeType = responseData.getMimeType();

            // Given: Mock message
            DcerpcMessage mockMessage = mock(DcerpcMessage.class);
            lenient().when(mockMessage.getResult()).thenReturn(null);

            // When: Encoding message (calls parent implementation)
            // Then: Should complete without throwing exception
            assertDoesNotThrow(() -> handle.encodeMessage(mockMessage, new byte[100]));
        }
    }

    @Nested