}
        }

        public void setFlagsForTest(int flags) {
            // Workaround: Use reflection to set private flags field
            try {
                java.lang.reflect.Field flagsField = ServerMessageBlock2.class.getDeclaredField("flags");
                flagsField.setAccessible(true);
                flagsField.set(this, flags);
            } catch (Exception e) {
                throw new RuntimeException(e);

        return this.extraSids;
    }

    /**
     * Returns the user account control flags.
     * @return the user account control value
     */
    public int getUserAccountControl() {
        return this.userAccountControl;
    }

    /**
     * Returns the user flags indicating PAC content.
     * @return the user flags value
     */
    public int getUserFlags() {
        return this.userFlags;
    }

        // Setup server data for this scenario
        serverData.capabilities = 0; // No extended security
        serverData.encryptionKeyLength = 8;
        response.flags2 = ServerMessageBlock.FLAGS2_UNICODE;
        byte[] domainNameBytes = "DOMAIN_U".getBytes("UTF-16LE");
        response.byteCount = 8 + domainNameBytes.length + 2; // key + domain + null terminator

     * @param off the start offset in the data
     * @param len the number of bytes to write
     * @param flags write operation flags
     * @throws IOException if an I/O error occurs
     */
    public void writeDirect(final byte[] b, int off, int len, final int flags) throws IOException {
        if (len <= 0) {
            return;
        }

        if (this.tmp == null) {

 * and access permissions for SMB resources.
 */
public class SecurityDescriptor {

    SID owner_user, owner_group;
    /**
     * The type flags indicating security descriptor control flags.
     */
    public int type;
    /**
     * The array of access control entries (ACEs) in this security descriptor.
     */
    public ACE[] aces;

    /**

 * file operations.
 * </ul>
 *
 * <p>
 * The jCIFS API maps all of these operations into the standard Java
 * <code>XxxputStream</code> interface. A special <code>PIPE_TYPE</code>
 * flags is necessary to distinguish which type of Named Pipe behavior
 * is desired.
 *
 * <table border="1">
 * <caption>SmbNamedPipe Constructor Examples</caption>
 * <tr >

     */
    public MsrpcSamrConnect4(final String server, final int access, final SamrPolicyHandle policyHandle) {
        super(server, 2, access, policyHandle);
        this.ptype = 0;
        this.flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

     */
    public MsrpcSamrConnect2(final String server, final int access, final SamrPolicyHandle policyHandle) {
        super(server, access, policyHandle);
        ptype = 0;
        flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

        when(gssContext.getAnonymityState()).thenReturn(false);
        when(gssContext.getConfState()).thenReturn(false);
        when(gssContext.getIntegState()).thenReturn(false);

        int flags = ctx.getFlags();
        assertEquals(0, flags);
    }

    @Test
    @DisplayName("getFlags combines all flag bits when true")
    void getFlags_allTrue() {
        when(gssContext.getCredDelegState()).thenReturn(true);

     *
     * @return capability flags
     */
    public int getCapability() {
        return capability;
    }

    /**
     * Set interface capabilities
     *
     * @param capability capability flags
     */
    public void setCapability(int capability) {
        this.capability = capability;
        // Update capability flags based on bitmask