[out] policy_handle *handle);

	[op(0x07)]
	int SamrOpenDomain([in] policy_handle *handle,
			[in] uint32_t access_mask,
			[in] sid_t *sid,
			[out] policy_handle *domain_handle);

	typedef struct {
		uint32_t idx;
		unicode_string name;
	} SamrSamEntry;

	typedef struct {
		uint32_t count;
		[size_is(count)] SamrSamEntry *entries;
	} SamrSamArray;

	[op(0x0f)]

    // error classes
    /** Success status code */
    public static final int SUCCESS = 0;
    /** Name service error class */
    public static final int ERR_NAM_SRVC = 0x01;
    /** Session service error class */
    public static final int ERR_SSN_SRVC = 0x02;

    // name service error codes
    /** Format error in the name service */
    public static final int FMT_ERR = 0x1;
    /** Server error in the name service */

        buffer[bufferIndex++] = 0;
        // securityMode
        buffer[bufferIndex++] = 0x03;
        // maxMpxCount
        buffer[bufferIndex++] = 50;
        buffer[bufferIndex++] = 0;
        // maxNumberVcs
        buffer[bufferIndex++] = 1;
        buffer[bufferIndex++] = 0;
        // maxBufferSize
        buffer[bufferIndex++] = (byte) 0x00;
        buffer[bufferIndex++] = (byte) 0x40;
        buffer[bufferIndex++] = 0;

     * Test constructor with malformed data (too short).
     */
    @Test
    void testConstructorMalformedData() {
        // Prepare data (only 2 bytes, less than an int)
        byte[] data = new byte[] { 0x01, 0x02 };

        // Verify that PACDecodingException is thrown
        assertThrows(PACDecodingException.class, () -> {
            new PacSignature(data);
        });
    }

    /**

            dst[dstIndex + 2 * i + 2] = (byte) ((tmp[i] & 0x0F) + 0x41);
        }
        for (; i < 15; i++) {
            dst[dstIndex + 2 * i + 1] = (byte) 0x43;
            dst[dstIndex + 2 * i + 2] = (byte) 0x41;
        }
        dst[dstIndex + TYPE_OFFSET] = (byte) (((this.hexCode & 0xF0) >> 4) + 0x41);
        dst[dstIndex + TYPE_OFFSET + 1] = (byte) ((this.hexCode & 0x0F) + 0x41);

        assertEquals(outlen, expanded.length);

        // Test vectors from RFC 3961 Appendix A.1
        // 64-fold("012345")
        verifyNfold("012345", 8,
                new byte[] { (byte) 0xbe, (byte) 0x07, (byte) 0x26, (byte) 0x31, (byte) 0x27, (byte) 0x6b, (byte) 0x19, (byte) 0x55 });

        // 56-fold("password")
        verifyNfold("password", 7,

    // relative to headerStart
    private static final int SETUP_OFFSET = 61;

    private static final int DISCONNECT_TID = 0x01;
    private static final int ONE_WAY_TRANSACTION = 0x02;

    private int pad;
    private int pad1;
    private boolean parametersDone, dataDone;

    protected int totalParameterCount;
    protected int totalDataCount;

        filter.init(filterConfig);

        // Test NTLM Type 1 message handling
        byte[] type1Message = new byte[] { 0x4E, 0x54, 0x4C, 0x4D, 0x53, 0x53, 0x50, 0x00, 0x01, 0x00, 0x00, 0x00 };
        String authHeader = "NTLM " + new String(org.bouncycastle.util.encoders.Base64.encode(type1Message));

        when(request.getHeader("Authorization")).thenReturn(authHeader);

                dst[dstIndex + 2 * i + 2] = (byte) ((tmp[i] & 0x0F) + 0x41);
            }
            for (; i < 15; i++) {
                dst[dstIndex + 2 * i + 1] = (byte) 0x43;
                dst[dstIndex + 2 * i + 2] = (byte) 0x41;
            }
            dst[dstIndex + TYPE_OFFSET] = (byte) (((hexCode & 0xF0) >> 4) + 0x41);
            dst[dstIndex + TYPE_OFFSET + 1] = (byte) ((hexCode & 0x0F) + 0x41);

        private final InetAddress address;
        private final int flags;

        /** Flag indicating IPv4 address type */
        public static final int IPV4 = 0x01;
        /** Flag indicating IPv6 address type */
        public static final int IPV6 = 0x02;

        /**
         * Creates a new witness IP address.
         *
         * @param address the IP address
         */