SmbException thrown = assertThrows(SmbException.class, () -> {
            new SamrDomainHandle(mockDcerpcHandle, mockPolicyHandle, access, mockSid);
        });
        assertEquals(errorCode, thrown.getNtStatus());
        verify(mockDcerpcHandle, times(1)).sendrecv(any(MsrpcSamrOpenDomain.class));
    }

    @Test
    void constructor_shouldThrowIOExceptionOnSendRecvFailure() throws IOException {
        // Arrange

            new LsaPolicyHandle(mockDcerpcHandle, server, access);
        });

        // In smb1, non-NTSTATUS error codes get mapped to NT_STATUS_UNSUCCESSFUL (0xC0000001)
        assertEquals(0xC0000001, thrown.getNtStatus()); // NT_STATUS_UNSUCCESSFUL
        verify(mockDcerpcHandle, times(1)).sendrecv(any(MsrpcLsarOpenPolicy2.class));
    }

    @Test
    void constructor_shouldThrowIOExceptionOnSendRecvFailure() throws IOException {

        // When
        SmbException exception = new SmbException(ntStatus, false);

        // Then
        assertNotNull(exception);
        assertEquals(ntStatus, exception.getNtStatus());
        assertTrue(exception.getMessage().contains("Access is denied"));
    }

    @Test
    @DisplayName("Should create SmbException with message")
    void testSmbExceptionWithMessage() {
        // Given

            new LsaPolicyHandle(mockDcerpcHandle, server, access);
        });

        // The error code gets mapped to NT_STATUS_UNSUCCESSFUL because it's not a valid NT status code
        assertEquals(0xC0000001, thrown.getNtStatus()); // NT_STATUS_UNSUCCESSFUL
        verify(mockDcerpcHandle, times(1)).sendrecv(any(MsrpcLsarOpenPolicy2.class));
    }

    @Test
    void constructor_shouldThrowIOExceptionOnSendRecvFailure() throws IOException {

                log.debug(String.format("VALIDATE_NEGOTIATE_INFO response code 0x%x", e.getNtStatus()));
            }
            log.trace("VALIDATE_NEGOTIATE_INFO returned error", e);
            if (req.getResponse().isReceived() && req.getResponse().isVerifyFailed()
                    || e.getNtStatus() == NtStatus.NT_STATUS_ACCESS_DENIED) {
                // this is the signature error

                log.warn("Failed to set file attributes on " + path, e);
            } catch (final SmbException se) {
                log.trace("copyTo0", se);
                if (se.getNtStatus() != NtStatus.NT_STATUS_ACCESS_DENIED && se.getNtStatus() != NtStatus.NT_STATUS_OBJECT_NAME_COLLISION) {
                    throw se;
                }
            }
        }

                            }
                        } else {
                            if (e.getNtStatus() != 0xC000035C && e.getNtStatus() != 0xC0000203 || !trans.isSMB2()) {
                                throw e;
                            }
                            if (e.getNtStatus() == 0xC0000203) { // USER_SESSION_DELETED
                                try {

        SmbException thrown = assertThrows(SmbException.class, handle::close);

        // SmbException constructor maps non-NT status codes to NT_STATUS_UNSUCCESSFUL
        assertEquals(0xC0000001, thrown.getNtStatus()); // NT_STATUS_UNSUCCESSFUL
        verify(mockHandle, times(1)).sendrecv(any(MsrpcSamrCloseHandle.class));
    }

        // Assert
        assertEquals("Unexpectedly reached end of file", ex.getMessage(), "Default message must match");
        assertEquals(NtStatus.NT_STATUS_UNSUCCESSFUL, ex.getNtStatus(), "Default NT status should be UNSUCCESSFUL");
        assertNull(ex.getCause(), "Cause should be null by default");
        assertNull(ex.getRootCause(), "Root cause should be null by default");

                if (LogStream.level > 1) {
                    log.println("NtlmHttpFilter: " + ntlm.getName() + ": 0x" + jcifs.smb1.util.Hexdump.toHexString(sae.getNtStatus(), 8)
                            + ": " + sae);
                }
                if (sae.getNtStatus() == NtStatus.NT_STATUS_ACCESS_VIOLATION) {
                    /* Server challenge no longer valid for
                     * externally supplied password hashes.