// Common happy-path defaults
        // Use lenient() to avoid strict stubbing issues with Mockito
        lenient().when(tree.acquire()).thenReturn(tree);
        lenient().when(tree.getConfig()).thenReturn(config);
        lenient().when(config.getListCount()).thenReturn(10);
        lenient().when(config.getListSize()).thenReturn(4096);

        lenient().when(parent.getLocator()).thenReturn(locator);

    private SmbFileOutputStream outputStream;

    @BeforeEach
    void setUp() {
        // Common setup for most tests
        lenient().when(mockFileHandle.getTree()).thenReturn(mockTreeHandle);
        lenient().when(mockTreeHandle.getConfig()).thenReturn(mockConfig);
    }

    @Test
    void testWriteSingleByte() throws IOException, CIFSException {
        // Given

        mockRandom.nextBytes(machineId);

        lenient().when(mockConfig.getDefaultDomain()).thenReturn("TESTDOMAIN");
        lenient().when(mockConfig.isUseUnicode()).thenReturn(true);
        lenient().when(mockConfig.getOemEncoding()).thenReturn("UTF-8");
        lenient().when(mockConfig.getRandom()).thenReturn(mockRandom);
        lenient().when(mockConfig.getLanManCompatibility()).thenReturn(3); // Default NTLMv2

        lenient().when(UniAddress.getByName("domain.com", true)).thenReturn(uniAddress);
        lenient().when(SmbTransport.getSmbTransport(uniAddress, 0)).thenReturn(smbTransport);

        DfsReferral referral = new DfsReferral();
        referral.server = "dc1.domain.com";
        referral.next = referral;

            lenient().doNothing().when(mockBuffer).advance(anyInt());
            lenient().doNothing().when(mockBuffer).enc_ndr_long(anyInt());
            lenient().doNothing().when(mockBuffer).enc_ndr_short(anyInt());
            lenient().doNothing().when(mockBuffer).enc_ndr_small(anyInt());
            lenient().doNothing().when(mockBuffer).setIndex(anyInt());

        when(pipe.openUnshared(anyInt(), anyInt(), anyInt(), anyInt(), anyInt())).thenReturn(fh);
        when(fh.acquire()).thenReturn(fh);
        lenient().when(fh.isValid()).thenReturn(true);
        lenient().when(fh.getTree()).thenReturn(tree);
        lenient().when(tree.getReceiveBufferSize()).thenReturn(4096);

        // Mock the streams
        SmbPipeInputStream mockIn = mock(SmbPipeInputStream.class);

        ntlmSsp = new NtlmSsp();

        // Use lenient stubbing to avoid UnnecessaryStubbing errors for tests that don't need all mocks
        lenient().when(mockCifsContext.getConfig()).thenReturn(mockConfig);
        lenient().when(mockConfig.getDefaultDomain()).thenReturn("DOMAIN");
        lenient().when(mockConfig.isUseUnicode()).thenReturn(true);

java.util.Random#<init>()
java.util.concurrent.ThreadLocalRandom

java.security.MessageDigest#clone() @ use org.elasticsearch.common.hash.MessageDigests

@defaultMessage Don't use MethodHandles in slow ways, don't be lenient in tests.
java.lang.invoke.MethodHandle#invoke(java.lang.Object[])
java.lang.invoke.MethodHandle#invokeWithArguments(java.lang.Object[])
java.lang.invoke.MethodHandle#invokeWithArguments(java.util.List)

        // Setup mock behavior for GSSManager with lenient matchers
        lenient().when(gssManager.createName(anyString(), any(), any())).thenReturn(serviceName);
        lenient().when(gssManager.createName(anyString(), any())).thenReturn(serviceName);
        lenient().when(gssManager.createContext(any(), any(), any(), anyInt())).thenReturn(gssContext);

    @BeforeEach
    void setUp() throws Exception {
        filter = new NtlmHttpFilter();

        // Setup lenient stubs for common mock interactions
        lenient().when(request.getSession()).thenReturn(httpSession);
        lenient().when(request.getSession(anyBoolean())).thenReturn(httpSession);
        lenient().when(response.getOutputStream()).thenReturn(servletOutputStream);
    }

    @Test