@DisplayName("toString() renders lower-case hex with zero-padding")
    void toString_rendersHex(byte[] input, String expected) {
        // Arrange
        SecurityBlob blob = new SecurityBlob(input);

        // Act
        String actual = blob.toString();

        // Assert
        assertEquals(expected, actual, "Hex string should match expected format");
    }

    @Test
    void testClose() throws Exception {
        // Act
        smbTransport.close();

        // Assert
        verify(smbTransport).close(); // Verify that the close method was called
    }

    @Test
    void testGetRemoteAddress() {
        // Arrange
        when(smbTransport.getRemoteAddress()).thenReturn(remoteAddress);

        // Act
        Address result = smbTransport.getRemoteAddress();

        - 'https://server3-pool2:9000/mnt/disk{1...4}/'
        - 'https://server4-pool2:9000/mnt/disk{1...4}/'

options:
  ftp: # settings for MinIO to act as an ftp server
        address: ':8021'
        passive-port-range: '30000-40000'
  sftp: # settings for MinIO to act as an sftp server
        address: ':8022'

            MsrpcLsarOpenPolicy2 rpc = invocation.getArgument(0);
            rpc.retval = 0; // Simulate success
            return null;
        }).when(mockDcerpcHandle).sendrecv(any(MsrpcLsarOpenPolicy2.class));

        // Act
        LsaPolicyHandle handle = new LsaPolicyHandle(mockDcerpcHandle, server, access);

        // Assert
        assertNotNull(handle);
        verify(mockDcerpcHandle, times(1)).sendrecv(any(MsrpcLsarOpenPolicy2.class));

    @Test
    @DisplayName("byte[] ctor: empty token throws PACDecodingException with clear message")
    void byteArrayConstructor_emptyToken_throws() {
        // Arrange
        byte[] empty = new byte[0];

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(empty, new KerberosKey[0]));
        assertTrue(ex.getMessage().contains("Empty kerberos ApReq"));
    }

    @Test

    @Test
    void returnsProvidedValues_happyPath() {
        // Arrange
        SmbBasicFileInfo info = new TestInfo(0x20 /* ARCHIVE */, 1_600_000_000_000L, 1_700_000_000_000L, 1_650_000_000_000L, 42L);

        // Act & Assert
        Assertions.assertEquals(0x20, info.getAttributes(), "attributes should match");
        Assertions.assertEquals(1_600_000_000_000L, info.getCreateTime(), "create time should match");

        URL url = new URL(null, "smb://host/share", handler);

        // Act
        URLConnection conn = handler.openConnection(url);

        // Assert
        assertNotNull(conn);
        assertTrue(conn instanceof SmbFile);
    }

    @Test
    @DisplayName("openConnection throws NPE for null URL")
    void testOpenConnectionWithNullUrl() {
        // Act & Assert

        void doShareEnum_invalidPath_throws(String url, String pathSuffix, boolean expectDirSlashMsg) throws Exception {
            // Arrange
            SmbFile parent = new SmbFile(url);

            // Act + Assert
            SmbException ex = assertThrows(SmbException.class, () -> SmbEnumerationUtil.doShareEnum(parent, "*", 0, null, null));

            // Assert message indicates which validation failed

    @Test
    @DisplayName("Default ctor: null message/cause and success status")
    void defaultConstructor_hasNullMessageAndCause_andDefaultStatus() {
        // Arrange & Act
        SMBSignatureValidationException ex = new SMBSignatureValidationException();

        // Assert
        assertNull(ex.getMessage(), "Default ctor should not set a message");

        boolean guest = flags[1];

        // Arrange
        Subject subject = new Subject();
        TestCredentials creds = new TestCredentials("DOMAIN", anonymous, guest, subject, false);

        // Act & Assert
        // unwrap to interface itself should return same instance
        CredentialsInternal unwrapped = creds.unwrap(CredentialsInternal.class);