@DisplayName("Should set SMB2_FLAGS_SIGNED flag")
        void testSignSetsSignedFlag() {
            // Set initial flags without signed flag
            int initialFlags = 0x00000001;
            SMBUtil.writeInt4(initialFlags, data, 16);

            digest.sign(data, 0, data.length, request, response);

            int flags = SMBUtil.readInt4(data, 16);

        }

        @Test
        @DisplayName("Signing flags should not overlap")
        void testSigningFlagsNoOverlap() {
            assertNotEquals(Smb2Constants.SMB2_NEGOTIATE_SIGNING_ENABLED, Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED,
                    "Signing flags must be distinct");

            // Verify they can be combined with bitwise OR

                ACE.FLAGS_INHERITED })
        @DisplayName("Flag constants should be powers of 2")
        void shouldBeValidFlagPowersOfTwo(int flag) {
            assertTrue(flag > 0, "Flag should be positive");
            assertEquals(0, flag & (flag - 1), "Flag should be power of 2: " + Integer.toHexString(flag));
        }

        @Test
        @DisplayName("Should validate all constants are unique")

 * flags, and other values used in SMB2/SMB3 communication.
 *
 * @author mbechler
 */
public final class Smb2Constants {

    /**
     *
     */
    private Smb2Constants() {
    }

    /**
     * SMB2 header length in bytes
     */
    public static final int SMB2_HEADER_LENGTH = 64;

    /**
     * SMB2 negotiate flag indicating signing is enabled
     */

        src[srcIndex + 16] = 0x00; // hex code
        src[srcIndex + 17] = 0x04; // flags: active

        // Second name entry (18 bytes)
        String name2 = "DOMAIN          ";
        System.arraycopy(name2.getBytes("US-ASCII"), 0, src, srcIndex + 19, 16);
        src[srcIndex + 34] = 0x00; // hex code
        src[srcIndex + 35] = (byte) 0x84; // flags: group, active

        // Third name entry (18 bytes) - matching queryAddress

        return new Smb2IoctlResponse(tc.getConfig(), this.outputBuffer, this.controlCode);
    }

    /**
     * Set the IOCTL flags
     * @param flags the flags to set
     */
    public void setFlags(final int flags) {
        this.flags = flags;
    }

    /**
     * Set the maximum input response size
     * @param maxInputResponse the maxInputResponse to set
     */

        // Command at +12
        SMBUtil.writeInt2(command, buf, start + 12);
        // Flags at +16: server-to-redirector
        SMBUtil.writeInt4(0x00000001, buf, start + 16);
        // SessionId at +40 (sync header)
        SMBUtil.writeInt8(sessionId, buf, start + 40);
    }

    /**
     * Build a SESSION_SETUP response body with specified flags and security blob.
     * securityBufferOffset is set relative to header start.
     */

        bb.putShort((short) 3);
        bb.putShort((short) 100);
        bb.putShort((short) 7);
        bb.putShort((short) 1); // rflags without name list flag
        bb.putShort((short) 20);
        bb.putShort((short) 3600);
        bb.putShort((short) 22);
        bb.putShort((short) 38);
        bb.putShort((short) 52);

        bb.position(22);

            assertNotNull(bytes);
            // Ensure target name is NOT written to the byte array
            int flags = Type2Message.readULong(bytes, 20);
            assertFalse((flags & Type2Message.NTLMSSP_REQUEST_TARGET) != 0);
        }

        @Test
        @DisplayName("toByteArray should not set target info flag when target info is null")
        void testToByteArray_TargetInfoNull_FlagNotSet() throws IOException {

    public static final int ACB_NORMAL = 16;
    /** Account control bit flag: MNS logon user account */
    public static final int ACB_MNS = 32;
    /** Account control bit flag: Interdomain trust account */
    public static final int ACB_DOMTRUST = 64;
    /** Account control bit flag: Workstation trust account */
    public static final int ACB_WSTRUST = 128;