if (this.isUseUnicode()) {
                            this.accountName = this.accountName.toUpperCase();
                        }
                        this.primaryDomain = a.getUserDomain() != null ? a.getUserDomain().toUpperCase() : "?";
                    } else {
                        this.accountName = "";
                        this.primaryDomain = "";
                    }
                } else {

        when(mockCredentials.getUserDomain()).thenReturn(null);
        assertFalse(dfsImpl.isTrustedDomain(mockContext, "anydomain.com"));
    }

    @Test
    void testIsTrustedDomain_ConnectionFails() throws SmbAuthException {
        // Scenario: Transport connection fails
        when(mockCredentials.getUserDomain()).thenReturn("authdomain.com");

    void testIsTrustedDomain_NoUserDomain() throws CIFSException {
        when(mockConfig.isDfsDisabled()).thenReturn(false);
        when(mockContext.getCredentials()).thenReturn(mockCredentials);
        when(mockCredentials.getUserDomain()).thenReturn(null);
        assertFalse(dfsResolver.isTrustedDomain(mockContext, "anyDomain"));
    }

    @Test
    void testIsTrustedDomain_EmptyUserDomain() throws CIFSException {

        if (this.auth instanceof NtlmNtHashAuthenticator) {
            return new Type3Message(this.transportContext, msg2, this.targetName, this.auth.getNTHash(), this.auth.getUserDomain(),
                    this.auth.getUsername(), this.workstation, this.ntlmsspFlags);
        }

        // Use secure password handling
        String passwordString = null;
        if (this.auth.isGuest()) {

        // Clone and verify basic fields copied
        JAASAuthenticator copy = (JAASAuthenticator) orig.clone();
        assertEquals(orig.getUsername(), copy.getUsername());
        assertEquals(orig.getUserDomain(), copy.getUserDomain());
        assertEquals(orig.getPassword(), copy.getPassword());

        // Test the cloning behavior with both null and non-null cached subjects
        if (first != null) {

        when(auth.isAnonymous()).thenReturn(true);
        when(auth.isGuest()).thenReturn(true);
        when(auth.getUsername()).thenReturn("guest");
        when(auth.getUserDomain()).thenReturn("dom");

        // Construct
        SmbComSessionSetupAndX obj = new SmbComSessionSetupAndX(mockContext, mockNegotiate, mockAndX, auth);
        String accountName = (String) getField(obj, "accountName");

                return;
            }
            final HttpSession ssn = request.getSession();
            ssn.setAttribute("NtlmHttpAuth", ntlm);
            ssn.setAttribute("ntlmdomain", ntlm.getUserDomain());
            ssn.setAttribute("ntlmuser", ntlm.getUsername());
        } else {
            final HttpSession ssn = request.getSession(false);
            if (ssn == null || ssn.getAttribute("NtlmHttpAuth") == null) {

        NtlmPasswordAuthentication capturedAuth = authCaptor.getValue();
        assertEquals("user", capturedAuth.getUsername());
        assertEquals("TEST_DOMAIN", capturedAuth.getUserDomain());

        verify(response, never()).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }

    /**
     * Test the service method with an existing valid session.

        // Verify
        assertNotNull(result, "Authentication result should not be null");
        assertEquals("DOMAIN", result.getUserDomain());
        assertEquals("user", result.getUsername());
        // Cannot verify challenge and responses as they are not exposed in the API

        when(config.isTraceResourceUsage()).thenReturn(false);
        // Mock credentials to avoid NullPointerException
        when(ctx.getCredentials()).thenReturn(credentials);
        when(credentials.getUserDomain()).thenReturn("DOMAIN");
        // Mock DFS resolver
        when(ctx.getDfs()).thenReturn(dfsResolver);
    }

    // Helper to set private field 'tree'