return this.extraSids;
    }

    /**
     * Returns the user account control flags.
     * @return the user account control value
     */
    public int getUserAccountControl() {
        return this.userAccountControl;
    }

    /**
     * Returns the user flags indicating PAC content.
     * @return the user flags value
     */
    public int getUserFlags() {
        return this.userFlags;
    }

    }

    /**
     * Sets the create disposition on an SMB2 create request based on flags
     *
     * @param req the SMB2 create request
     * @param flags the file open flags
     */
    private static void setCreateDisposition(final Smb2CreateRequest req, final int flags) {
        if ((flags & SmbConstants.O_TRUNC) == O_TRUNC && (flags & SmbConstants.O_CREAT) == O_CREAT) {

        }

        /**
         * DFS flags
         */
        public int flags;
        /**
         * The DFS name
         */
        public String dfs_name;

        @Override
        public void encode(NdrBuffer _dst) throws NdrException {
            _dst.align(4);
            _dst.enc_ndr_long(flags);
            _dst.enc_ndr_referent(dfs_name, 1);

    public void testEncoding() {
        byte[] buffer = new byte[256];
        int encodedSize = context.encode(buffer, 0);

        assertTrue(encodedSize > 8); // Minimum size: count + padding + flags + algorithms
        assertEquals(context.size(), encodedSize);
    }

    @Test
    @DisplayName("Test context decoding")
    public void testDecoding() throws SMBProtocolDecodingException {
        // Encode first

     * @param auth the authentication credentials to use
     * @param flags resolution flags
     * @return array of SIDs representing group members
     * @throws IOException if there is an error retrieving group members
     */
    public SID[] getGroupMemberSids(final String authorityServerName, final NtlmPasswordAuthentication auth, final int flags)
            throws IOException {

	typedef struct {
		[string] wchar_t *dfs_name;
	} DfsInfo200;

	typedef struct {
		uint32_t count;
		[size_is(count)] DfsInfo200 *s;
	} DfsEnumArray200;

	typedef struct {
		uint32_t flags;
		[string] wchar_t *dfs_name;
	} DfsInfo300;

	typedef struct {
		uint32_t count;
		[size_is(count)] DfsInfo300 *s;
	} DfsEnumArray300;

	typedef union {
		[case(1)] DfsEnumArray1 *info1;

     * @return whether the specified mechanism is preferred
     */
    boolean isPreferredMech(ASN1ObjectIdentifier selectedMech);

    /**
     * Gets the negotiated context flags.
     * @return context flags
     */
    int getFlags();

    /**
     * Gets the array of supported security mechanism OIDs.
     * @return array of supported mechanism OIDs
     */

            }
        }

        public void setFlagsForTest(int flags) {
            // Workaround: Use reflection to set private flags field
            try {
                java.lang.reflect.Field flagsField = ServerMessageBlock2.class.getDeclaredField("flags");
                flagsField.setAccessible(true);
                flagsField.set(this, flags);
            } catch (Exception e) {
                throw new RuntimeException(e);

        @Nullable Inet4Address server, @Nullable Inet4Address client, int port, int flags) {
      checkArgument(
          (port >= 0) && (port <= 0xffff), "port '%s' is out of range (0 <= port <= 0xffff)", port);
      checkArgument(
          (flags >= 0) && (flags <= 0xffff),
          "flags '%s' is out of range (0 <= flags <= 0xffff)",
          flags);

      this.server = MoreObjects.firstNonNull(server, ANY4);

 * and access permissions for SMB resources.
 */
public class SecurityDescriptor {

    SID owner_user, owner_group;
    /**
     * The type flags indicating security descriptor control flags.
     */
    public int type;
    /**
     * The array of access control entries (ACEs) in this security descriptor.
     */
    public ACE[] aces;

    /**