}
	return client
}

func TestIAMInternalIDPServerSuite(t *testing.T) {
	if runtime.GOOS == globalWindowsOSName {
		t.Skip("windows is clunky disable these tests")
	}
	for i, testCase := range iamTestSuites {
		t.Run(
			fmt.Sprintf("Test: %d, ServerType: %s", i+1, testCase.ServerTypeDescription),
			func(t *testing.T) {
				suite := testCase
				c := &check{t, testCase.serverType}

## Testing locally with Traefik { #testing-locally-with-traefik }

You can easily run the experiment locally with a stripped path prefix using <a href="https://docs.traefik.io/" class="external-link" target="_blank">Traefik</a>.

import com.google.common.collect.ImmutableMap;
import com.google.common.collect.ImmutableSet;
import com.google.common.collect.Iterables;
import com.google.common.collect.Sets;
import com.google.common.testing.NullPointerTester;
import com.google.common.testing.TestLogHandler;
import com.google.common.util.concurrent.Service.State;
import com.google.common.util.concurrent.ServiceManager.Listener;
import java.time.Duration;
import java.util.ArrayList;

import okhttp3.EventRecorder
import okhttp3.Headers
import okhttp3.OkHttpClientTestRule
import okhttp3.Request
import okhttp3.sse.EventSource
import okhttp3.sse.EventSources.createFactory
import okhttp3.testing.PlatformRule
import org.junit.jupiter.api.AfterEach
import org.junit.jupiter.api.Tag
import org.junit.jupiter.api.Test
import org.junit.jupiter.api.extension.RegisterExtension
import org.junitpioneer.jupiter.RetryingTest

import static java.nio.charset.StandardCharsets.US_ASCII;
import static java.nio.charset.StandardCharsets.UTF_8;
import static org.junit.Assert.assertThrows;

import com.google.common.collect.ImmutableList;
import com.google.common.testing.NullPointerTester;
import java.io.ByteArrayOutputStream;
import java.io.File;
import java.io.IOException;
import java.io.PrintWriter;
import java.net.URL;
import java.net.URLClassLoader;
import java.util.ArrayList;

     *
     * The server’s TLS certificate **does not need to be signed** by a trusted certificate
     * authority. Instead, it will trust any well-formed certificate, even if it is self-signed.
     * This is necessary for testing against localhost or in development environments where a
     * certificate authority is not possible.
     *
     * The server’s TLS certificate still must match the requested hostname. For example, if the

                files.add(file);
            } catch (Exception e) {
                log.warn("Error creating SmbFile from cache for {}: {}", fileInfo.getName(), e.getMessage());
                // For testing purposes, continue processing other files
                // In a real scenario, you might want to handle this differently
            }
        }

        return files;
    }

    /**

        packet.length = 10;

        assertThrows(IOException.class, () -> {
            packet.readTrailerWireFormat(emptyStream, new byte[10], 0);
        });
    }

    // Helper class for testing with concrete NetbiosName implementation
    private class TestNetbiosName implements NetbiosName {
        private final String name;
        private final int type;
        private final String scope;

        @Test
        void shouldReturnNullWhenWrappedIsNeitherInetAddressNorAddress() throws Exception {
            // UniAddress only accepts InetAddress, NbtAddress (which implements Address), or Address
            // Testing with NbtAddress which doesn't return anything from toInetAddress
            NbtAddress nbtAddress = mock(NbtAddress.class);
            when(nbtAddress.toInetAddress()).thenReturn(null);

        Map<String, URLStreamHandler> handlers = (Map<String, URLStreamHandler>) handlersField.get(null);
        handlers.clear();
    }

    /**
     * Pre-populates the protocol handlers cache with mock handlers for testing.
     * This avoids the need for actual protocol handlers to be available.
     */
    private void setupMockProtocolHandlers() throws Exception {
        Field handlersField = Handler.class.getDeclaredField("PROTOCOL_HANDLERS");