super(config, SMB_COM_TRANSACTION2, SmbComTransaction.TRANS2_FIND_FIRST2);
    }

    /**
     * Gets the search ID for this response.
     *
     * @return the sid
     */
    public final int getSid() {
        return this.sid;
    }

    /**
     * Checks if this is the end of the search results.
     *
     * @return the isEndOfSearch
     */
    public final boolean isEndOfSearch() {

import org.junit.jupiter.api.Test;

import jcifs.smb.SID;

/**
 * Tests for the {@link PacGroup} class.
 */
class PacGroupTest {

    private SID mockSid;
    private PacGroup pacGroup;
    private final int attributes = 42;

    @BeforeEach
    void setUp() {
        // Mock the SID object
        mockSid = mock(SID.class);
        pacGroup = new PacGroup(mockSid, attributes);
    }

package jcifs.smb1.smb1;

class SmbComFindClose2 extends ServerMessageBlock {

    private final int sid;

    SmbComFindClose2(final int sid) {
        this.sid = sid;
        command = SMB_COM_FIND_CLOSE2;
    }

    @Override
    int writeParameterWordsWireFormat(final byte[] dst, final int dstIndex) {
        writeInt2(sid, dst, dstIndex);
        return 2;
    }

    @Override

     */
    SID[] getGroupMemberSids(CIFSContext tc, String authorityServerName, SID domsid, int rid, int flags) throws CIFSException;

    /**
     * Gets the domain SID for the specified server.
     *
     * @param authorityServerName the server name
     * @param tc the CIFS context to use
     * @return the server's SID

 */
package jcifs.pac;

import jcifs.smb.SID;

/**
 * Represents a Security Identifier (SID) with associated attributes within a PAC structure.
 * This class encapsulates a SID and its attribute flags as used in Kerberos PAC data.
 */
public class PacSidAttributes {

    private final SID id;
    private final int attributes;

    /**

    }

    @Nested
    @DisplayName("SID Tests")
    class SidTests {

        @Test
        @DisplayName("Should encode SID correctly")
        void testSidTEncode() throws NdrException {
            // Given: A SID with test values
            rpc.sid_t sid = new rpc.sid_t();
            sid.revision = (byte) 1;
            sid.sub_authority_count = (byte) 2;

    /** SID name type: well-known group. */
    public static final int SID_NAME_WKN_GRP = 5;
    /** SID name type: deleted account. */
    public static final int SID_NAME_DELETED = 6;
    /** SID name type: invalid. */
    public static final int SID_NAME_INVALID = 7;
    /** SID name type: unknown. */
    public static final int SID_NAME_UNKNOWN = 8;

    /**
     * LSA translated SID structure for name to SID lookups.

        return this.aces;
    }

    /**
     * Gets the owner group SID of this security descriptor.
     *
     * @return the security identifier of the owner group
     */
    public final SID getOwnerGroupSid() {
        return this.ownerGroupSid;
    }

    /**
     * Gets the owner user SID of this security descriptor.
     *
     * @return the security identifier of the owner user
     */

            if (responseData.getUrl().startsWith("smb:")) {
                final SID[] allowedSids = (SID[]) metaDataMap.get(SmbClient.SMB_ALLOWED_SID_ENTRIES);
                if (allowedSids != null) {
                    for (final SID sid : allowedSids) {
                        final String accountId = sambaHelper.getAccountId(sid);
                        if (accountId != null) {

 * "The .NET Developer's Guide to Windows Security" (which is also
 * available online).
 * <p>
 * Direct ACEs are evaluated first in order. The SID of the user performing
 * the operation and the desired access bits are compared to the SID
 * and access mask of each ACE. If the SID matches, the allow/deny flags
 * and access mask are considered. If the ACE is a "deny"
 * ACE and <i>any</i> of the desired access bits match bits in the access