protected boolean forceUnicode = false;
    /** Whether SMB signing is preferred but not required */
    protected boolean signingPreferred = false;
    /** Whether SMB signing is enforced (required) */
    protected boolean signingEnforced = false;
    /** Whether to enforce signing for IPC connections */
    protected boolean ipcSigningEnforced = true;
    /** Whether SMB3 encryption is enabled */

@MockitoSettings(strictness = Strictness.LENIENT)
class Smb2SessionSetupResponseTest extends BaseTest {

    private Smb2SessionSetupResponse newResponse() {
        // Configuration is not used during decode when no signing digest is set
        Configuration cfg = mock(Configuration.class);
        return new Smb2SessionSetupResponse(cfg);
    }

    /**
     * Build a minimal SMB2 header for a response at the given offset.

            this.negotiatedFlags2 &= 0xFFFF ^ SmbConstants.FLAGS2_SECURITY_REQUIRE_SIGNATURES;
        }

        if (log.isDebugEnabled()) {
            log.debug("Signing " + ((this.negotiatedFlags2 & SmbConstants.FLAGS2_SECURITY_SIGNATURES) != 0 ? "enabled " : "not-enabled ")

import org.mockito.ArgumentCaptor;
import org.mockito.Mock;
import org.mockito.MockitoAnnotations;

/**
 * Test class for SMBSigningDigest interface
 * Tests the contract and behavior of signing and verification methods
 */
class SMBSigningDigestTest {

    @Mock
    private SMBSigningDigest signingDigest;

    @Mock
    private CommonServerMessageBlock request;

    @Mock

                (byte) 0xFE, (byte) 0xDC, (byte) 0xBA, (byte) 0x98, (byte) 0x76, (byte) 0x54, (byte) 0x32, (byte) 0x10 };

        // Security mode with signing required
        int testSecurityMode = 0x0003; // SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED

        // SMB 3.1.1 dialect
        int testDialect = 0x0311;

        // Write to buffer

        SMBSigningDigest dg = mock(SMBSigningDigest.class);
        setField(session, "digest", dg);
        assertFalse(session.isSignatureSetupRequired());

        // Case 2: no digest, signing enforced by transport -> true
        setField(session, "digest", null);
        when(transport.isSigningEnforced()).thenReturn(true);
        assertTrue(session.isSignatureSetupRequired());

                trans.ensureConnected();
                log.warn("""
                        Default credentials (jcifs.smb.client.username/password)\
                         not specified. SMB signing may not work propertly.\
                          Skipping DC interrogation.""");
            } else {

    /** Whether to use NT status codes */
    boolean USE_NTSTATUS = Config.getBoolean("jcifs.smb1.smb.client.useNtStatus", true);
    /** Whether signing is preferred */
    boolean SIGNPREF = Config.getBoolean("jcifs.smb1.smb.client.signingPreferred", false);
    /** Whether to use NT SMBs */
    boolean USE_NTSMBS = Config.getBoolean("jcifs.smb1.smb.client.useNTSmbs", true);

        setField(transport, "negotiated", new Smb2NegotiateResponse(cfg));
        assertNull(transport.getServerEncryptionKey());
    }

    @Test
    @DisplayName("Signing enforced/optional adhere to flags and negotiation")
    void signingModes() throws Exception {
        // Enforced via constructor flag -> optional false, enforced true regardless of negotiation

import org.junit.jupiter.api.Test;

/**
 * JUnit 5 tests for AndXServerMessageBlock in legacy smb1 package.
 *
 * The tests use small stub subclasses to drive encode/decode paths and
 * validate batching, chaining, signing, and NT_CREATE_ANDX extended handling.
 */
class AndXServerMessageBlockTest {

    /**
     * Test stub for AndXServerMessageBlock to control read/write logic.
     */