/**
     * 
     */
    public static final int SID_TYPE_WKN_GRP = 5;

    /**
     * 
     */
    public static final int SID_TYPE_DELETED = 6;

    /**
     * 
     */
    public static final int SID_TYPE_INVALID = 7;

    /**
     * 
     */
    public static final int SID_TYPE_UNKNOWN = 8;


    /**
     * 
     * @return domain SID
     */

 */

package jcifs.smb1.smb1;

class SmbComFindClose2 extends ServerMessageBlock {

    private int sid;

    SmbComFindClose2( int sid ) {
        this.sid = sid;
        command = SMB_COM_FIND_CLOSE2;
    }

    int writeParameterWordsWireFormat( byte[] dst, int dstIndex ) {
        writeInt2( sid, dst, dstIndex );
        return 2;
    }
    int writeBytesWireFormat( byte[] dst, int dstIndex ) {

import jcifs.smb1.Config;
import jcifs.smb1.util.Hexdump;

class Trans2FindNext2 extends SmbComTransaction {

    private int sid, informationLevel, resumeKey, flags;
    private String filename;

    Trans2FindNext2( int sid, int resumeKey, String filename ) {
        this.sid = sid;
        this.resumeKey = resumeKey;
        this.filename = filename;
        command = SMB_COM_TRANSACTION2;

@SuppressWarnings ( "javadoc" )
public class MsrpcSamrOpenDomain extends samr.SamrOpenDomain {

    public MsrpcSamrOpenDomain ( SamrPolicyHandle handle, int access, rpc.sid_t sid, SamrDomainHandle domainHandle ) {
        super(handle, access, sid, domainHandle);
        this.ptype = 0;
        this.flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

			[in] uint32_t unknown,
			[in] uint32_t access_mask,
			[out] policy_handle *handle);

	[op(0x07)]
	int SamrOpenDomain([in] policy_handle *handle,
			[in] uint32_t access_mask,
			[in] sid_t *sid,
			[out] policy_handle *domain_handle);

	typedef struct {
		uint32_t idx;
		unicode_string name;
	} SamrSamEntry;

	typedef struct {
		uint32_t count;
		[size_is(count)] SamrSamEntry *entries;

import jcifs.internal.util.SMBUtil;
import jcifs.smb.SID;


/**
 * Internal use only
 * 
 * @internal
 */
public class SecurityDescriptor implements SecurityInfo {

    /**
     * Descriptor type
     */
    private int type;

    /**
     * ACEs
     */
    private ACE[] aces;
    private SID ownerUserSid, ownerGroupSid;


    /**
     * 
     */

    static final String TEST_DOMAIN_SHORT = "test.domain.netbios";
    static final String TEST_DOMAIN_SID = "test.domain.sid";
    static final String TEST_DOMAIN_DC = "test.domain.dc";
    static final String TEST_USER_SID = "test.user.sid";

    static final String TEST_GROUP_SID = "test.group.sid";
    static final String TEST_GROUP_NAME = "test.group.name";

    static final String TEST_CONFIG_DIR = "test.config.dir";

    public SamrDomainHandle(DcerpcHandle handle,
                SamrPolicyHandle policyHandle,
                int access,
                rpc.sid_t sid) throws IOException {
        this.handle = handle;
        MsrpcSamrOpenDomain rpc = new MsrpcSamrOpenDomain(policyHandle, access, sid, this);
        handle.sendrecv(rpc);
        if (rpc.retval != 0)
            throw new SmbException(rpc.retval, false);
    }

    private boolean opened;


    public SamrDomainHandle ( DcerpcHandle handle, SamrPolicyHandle policyHandle, int access, rpc.sid_t sid ) throws IOException {
        this.handle = handle;
        MsrpcSamrOpenDomain rpc = new MsrpcSamrOpenDomain(policyHandle, access, sid, this);
        handle.sendrecv(rpc);
        if ( rpc.retval != 0 ) {
            throw new SmbException(rpc.retval, false);
        }

 * "The .NET Developer's Guide to Windows Security" (which is also
 * available online).
 * <p>
 * Direct ACEs are evaluated first in order. The SID of the user performing
 * the operation and the desired access bits are compared to the SID
 * and access mask of each ACE. If the SID matches, the allow/deny flags
 * and access mask are considered. If the ACE is a "deny"
 * ACE and <i>any</i> of the desired access bits match bits in the access