}
    }

    /**
     * Return a string represeting this ACE.
     * <p>
     * Note: This function should probably be changed to return SDDL
     * fragments but currently it does not.
     */
    @Override
    public String toString() {
        final int count, i;
        final String str;

        final StringBuffer sb = new StringBuffer();

        byte[] zeroFileId = new byte[16];
        Smb2FlushRequest zeroRequest = new Smb2FlushRequest(mockConfig, zeroFileId);
        testFileIdInRequest(zeroRequest, zeroFileId);

        // Test with all ones
        byte[] onesFileId = new byte[16];
        Arrays.fill(onesFileId, (byte) 0xFF);
        Smb2FlushRequest onesRequest = new Smb2FlushRequest(mockConfig, onesFileId);
        testFileIdInRequest(onesRequest, onesFileId);

        // This simplified test just verifies the initial handshake detection
    }

    /**
     * Test handshake failure when the server does not return an NTLM challenge.
     * @throws IOException
     */
    @Test
    void testHandshakeFails_NoNtlmChallenge() throws IOException {
        // Arrange
        mockResponse(HTTP_UNAUTHORIZED, "Unauthorized",

        }
    }

    @Test
    @DisplayName("getRequestSecurityMode honors enforced and server-required flags")
    void requestSecurityMode() {
        // Not enforced, server does not require -> enabled only
        Smb2NegotiateResponse first = mock(Smb2NegotiateResponse.class);
        when(first.isSigningRequired()).thenReturn(false);

import org.mockito.Mock;
import org.mockito.junit.jupiter.MockitoExtension;

/**
 * JUnit 5 tests for {@link TestLocking}.
 * Tests command line argument parsing and basic field initialization.
 * Does not require a real SMB server - focuses on application logic.
 */
@ExtendWith(MockitoExtension.class)
class TestLockingTest {

    private PrintStream originalOut;
    private PrintStream originalErr;

                        // if signing is enforced and was not on the connection, skip
                        if (log.isTraceEnabled()) {
                            log.debug("Cannot reuse, signing enforced but connection does not have it enabled " + conn);
                        }
                        continue;
                    }

                    if (!forceSigning && !tc.getConfig().isSigningEnforced() && conn.isSigningEnforced()

        }
    }

    private boolean isExceptPrivateAccessible(Method method) {
        // to avoid warning of JDK-internal access at Java11
        // Lasta Di does not need private access to the classes
        final String fqcn = method.getDeclaringClass().getName();
        return fqcn.startsWith("java.") || fqcn.startsWith("jdk.") || fqcn.startsWith("com.sun.") || fqcn.startsWith("sun.");

     */
    int O_RDWR = 0x03;
    /**
     * Open in append mode.
     */
    int O_APPEND = 0x04;

    // Open Function Encoding
    /**
     * Create file if it does not exist.
     */
    int O_CREAT = 0x0010;
    /**
     * Fail if the file exists.
     */
    int O_EXCL = 0x0020;
    /**
     * Truncate file if it exists.
     */
    int O_TRUNC = 0x0040;

                size = sfd.getInitialSize();
                resumeKey = rkresp.getResumeKey();

                // start with some reasonably safe defaults, the server will till us if it does not like it
                // can we resume this if we loose the file descriptor?

                int maxChunks = 256;
                int maxChunkSize = 1024 * 1024;
                int byteLimit = 16 * 1024 * 1024;

            // Verify multi-channel capability (SMB3+ required)
            if (!transport.isSMB2() || !transport.hasCapability(0x00000008)) { // SMB2_GLOBAL_CAP_MULTI_CHANNEL
                throw new CIFSException("Server does not support SMB multi-channel capability");
            }

            log.info("Created multi-channel transport: {} -> {}", localAddress, serverAddress);
            return transport;