buf[i++] = (byte) (nameLen & 0xFF);
        // NAME
        System.arraycopy(nameBytes, 0, buf, i, nameLen);
        return buf;
    }

    // Provide a common OID for tests (Kerberos V5 mechanism OID encoded in DER)
    private static ASN1ObjectIdentifier testOid() {
        return new ASN1ObjectIdentifier("1.2.840.113554.1.2.2");
    }

    private static byte[] oidDer() {

     *
     * Property {@code jcifs.smb.client.dfs.disabled} (boolean, default false)
     *
     * @return whether DFS lookup is disabled
     */
    boolean isDfsDisabled();

    /**
     * Enable hack to make kerberos auth work with DFS sending short names
     *
     * This works by appending the domain name to the netbios short name and will fail horribly if this mapping is not
     * correct for your domain.
     *

import jcifs.smb.SID;

/**
 * Contains user logon information from a PAC (Privilege Attribute Certificate).
 * This class parses and provides access to user authentication and authorization
 * data from Kerberos tickets, including user identity, group memberships, and
 * logon metadata.
 */
public class PacLogonInfo {

    private Date logonTime;
    private Date logoffTime;
    private Date kickOffTime;

        SMB1SigningDigest digest = new SMB1SigningDigest(testMacSigningKey, true, initialSequence);
        assertNotNull(digest);
    }

    @Test
    @DisplayName("Test constructor with MAC signing key only (Kerberos mode)")
    void testConstructorKerberosMode() {
        SMB1SigningDigest digest = new SMB1SigningDigest(testMacSigningKey);
        assertNotNull(digest);
    }

    @Test

        }
    }
    
    private boolean isAuthorizedWitnessServer(InetAddress server) {
        // Implementation would check against authorized server list
        // Could use certificates, Kerberos, etc.
        return true;  // Simplified
    }
    
    private boolean isValidNotificationSource(WitnessNotification notification) {
        // Validate notification signature/source

            return this._domains.map;
        }
        try {
            final String authDomain = tf.getCredentials().getUserDomain();
            // otherwise you end up with a wrong server name for kerberos
            // seems to be correct according to
            // https://lists.samba.org/archive/samba-technical/2009-August/066486.html
            // UniAddress addr = UniAddress.getByName(authDomain, true, tf);