}
    }

    /**
     * Validates domain name
     *
     * @param domain the domain to validate
     * @throws IllegalArgumentException if domain is invalid
     */
    public static void validateDomain(String domain) {
        if (domain == null) {
            return; // Null domain allowed
        }
        if (domain.length() > MAX_DOMAIN_LENGTH) {

        assertEquals(1, parameterMap.size());
        assertEquals("D", parameterMap.get("domain"));

        parameters = "domain=DOMAIN";
        parameterMap = ParameterUtil.parse(parameters);
        assertEquals(1, parameterMap.size());
        assertEquals("DOMAIN", parameterMap.get("domain"));

        parameters = "\n";
        parameterMap = ParameterUtil.parse(parameters);

    }

    /**
     * Test domain constructor with char array
     */
    @Test
    public void testDomainCharArrayConstructor() {
        char[] testPassword = "DomainPass321!".toCharArray();
        NtlmPasswordAuthenticator auth = new NtlmPasswordAuthenticator("DOMAIN", "testuser", testPassword);

        assertEquals("DOMAIN", auth.getUserDomain());

     * <p>
     * Specifically, if the SID has
     * been resolved and it is not a domain SID or builtin account,
     * the full DOMAIN\name form of the account will be
     * returned (e.g. MYDOM\alice or MYDOM\Domain Users).
     * If the SID has been resolved but it is is a domain SID,
     * only the domain name will be returned (e.g. MYDOM).
     * If the SID has been resolved but it is a builtin account,

package jcifs.dcerpc.msrpc;

import jcifs.dcerpc.rpc;

/**
 * MSRPC implementation for opening a domain handle.
 * This class provides functionality to open a handle to a SAM domain
 * using the SAMR RPC interface.
 */
public class MsrpcSamrOpenDomain extends samr.SamrOpenDomain {

    /**
     * Creates a new request to open a domain handle.
     *
     * @param handle the SAM policy handle

            // Domain type: domain name as-is, account name empty
            SID domain = new SID(buildSidT((byte) 1, ident, 10, 20), jcifs.SID.SID_TYPE_DOMAIN, "MYDOM", "ignored", false);
            assertEquals("MYDOM", domain.getDomainName());
            assertEquals("", domain.getAccountName());

            // User in regular domain

        // Test User SID (type 1)
        assertEquals("1Test User", sambaHelper.getAccountId(createMockSID(1, "Test User")));

        // Test Domain Group SID (type 2)
        assertEquals("2Domain Group", sambaHelper.getAccountId(createMockSID(2, "Domain Group")));

        // Test Alias SID (type 4, mapped to 2)
        assertEquals("2Local Group", sambaHelper.getAccountId(createMockSID(4, "Local Group")));

    /**
     * Create username/password credentials with specified domain
     *
     * @param domain the authentication domain
     * @param username the username
     * @param passwordHash
     *            NT password hash
     */
    public NtlmNtHashAuthenticator(final String domain, final String username, final byte[] passwordHash) {
        super(domain, username, (String) null, AuthenticationType.USER);

        DEFAULT_DOMAIN = Config.getProperty("jcifs.smb1.smb.client.domain", null);
        byte[] domain = {};
        if (DEFAULT_DOMAIN != null) {
            try {
                domain = DEFAULT_DOMAIN.getBytes(UNI_ENCODING);
            } catch (final IOException ex) {}
        }
        final int domainLength = domain.length;
        byte[] server = {};
        try {

            // System properties should take precedence (if implemented)
            String domain = testConfig.getDefaultDomain();
            assertTrue(domain.equals("systemdomain") || domain.equals("propsdomain"));

        } finally {
            // Cleanup
            if (originalValue != null) {
                System.setProperty("jcifs.smb.client.domain", originalValue);
            } else {