}

    @Test
    @DisplayName("getSmbSession creates and then reuses matching session")
    void getSmbSession_createAndReuse() {
        // Arrange: minimal credentials chain so SmbSessionImpl constructor succeeds
        CredentialsInternal creds = mock(CredentialsInternal.class);
        when(ctx.getCredentials()).thenReturn(creds);
        when(creds.unwrap(CredentialsInternal.class)).thenReturn(creds);

 * <code>FILE_WRITE_DATA</code> bit on (bit <code>0x00000002</code>). Actually, this isn't quite correct. If
 * <code>WNET\alice</code> is in the local <code>Administrators</code> group the access check
 * will succeed because the inherited ACE allows local <code>Administrators</code>
 * both <code>FILE_READ_DATA</code> and <code>FILE_WRITE_DATA</code> access.
 */

public class ACE {

    /**
     * Default constructor for ACE

            // Arrange
            doReturn(true).when(smbFile).exists();
            doReturn(true).when(smbFile).isDirectory();
            doNothing().when(smbFile).mkdir();

            // Act & Assert - mkdir should succeed silently if directory already exists
            smbFile.mkdir();
        }

        @Test
        void testRenameToSameFile() throws MalformedURLException, SmbException {
            // Arrange

#### Key rotation - Basic Operation

The MinIO server supports key rotation for SSE-S3 encrypted objects. The minio server decrypts the OEK using the current encrypted data key and the master key ID of the object metadata. If this succeeds, the server requests a new data key from the KMS using the master key ID of the **current MinIO KMS configuration** and re-wraps the *OEK* with a new *KEK* derived from the new data key / EK:

##### Figure 3 - KMS data key rotation

        updateItem2.setNewInputs(new String[] { "p", "q" });
        updateItem2.setNewOutput("r");

        // First update should succeed
        charMappingFile.update(updateItem1);

        // Second update should fail due to mismatch
        try {
            charMappingFile.update(updateItem2);
            fail("Should throw DictionaryException");

            // Encode to different buffers
            int result1 = request.encode(buffer1, 0);
            int result2 = request.encode(buffer2, 50);

            // Both should succeed independently
            assertTrue(result1 > 0);
            assertTrue(result2 > 0);

            // Verify headers in both buffers
            for (int i = 0; i < 8; i++) {

        // The code returns true on line 281 when signatures DON'T match
        boolean result = verifyDigest.verify(data, 0, data.length, 0, mockRequest);

        // The verification should succeed (return false) since we're using the same key
        assertFalse(result);
    }

    @Test
    @DisplayName("Test verify method with unsigned response")
    void testVerifyWithUnsignedResponse() {

        executor.shutdown();

        // Then - Verify results
        assertEquals(threadCount * operationsPerThread, successCount.get(), "All encryption operations should succeed");
        assertEquals(threadCount * operationsPerThread, encrypted.size(), "Should have encrypted results for each message");

        .getInputStream()
      fail<Any>()
    } catch (expected: IOException) {
    }
    server
      .url("/b")
      .toUrl()
      .openConnection()
      .getInputStream() // Should succeed.
  }

  /**
   * Throttle the request body by sleeping 500ms after every 3 bytes. With a 6-byte request, this
   * should yield one sleep for a total delay of 500ms.
   */
  @Test
  fun throttleRequest() {

// never the receiver, and has the effect of shutting down the channel after
// the last sent value is received. After the last value has been received
// from a closed channel c, any receive from c will succeed without
// blocking, returning the zero value for the channel element. The form
//
//	x, ok := <-c
//
// will also set ok to false for a closed and empty channel.
func close(c chan<- Type)