serverData1.sflags = (byte) 0x11;
        serverData1.smaxMpxCount = 100;
        serverData1.oemDomainName = "DOMAIN1";
        serverData1.encryptedPasswords = true;

        serverData2.sflags = (byte) 0x22;
        serverData2.smaxMpxCount = 200;
        serverData2.oemDomainName = "DOMAIN2";
        serverData2.encryptedPasswords = false;

        // Then - instances should be independent

    }

    @ParameterizedTest
    @MethodSource("domains")
    @DisplayName("getUserDomain handles null and empty")
    void getUserDomain_edges(String domain) {
        TestCredentials creds = new TestCredentials(domain, false, false, new Subject(), false);
        assertEquals(domain, creds.getUserDomain());
    }

    static Stream<String> domains() {
        return Stream.of(null, "", "SALES");
    }

     *
     * @param fqdn the fully qualified domain name to use
     */
    void fixupHost(String fqdn);

    /**
     * Possibly appends the given domain name to the host name if it is currently unqualified
     *
     * @param domain the domain name to append
     */
    void fixupDomain(String domain);

    /**
     * Reduces path consumed by the given value
     *

// A cross-domain policy file is an XML document that grants a web client, such as Adobe Flash Player
// or Adobe Acrobat (though not necessarily limited to these), permission to handle data across domains.
// When clients request content hosted on a particular source domain and that content make requests
// directed towards a domain other than its own, the remote domain needs to host a cross-domain

		[size_is(num_sids)] LsarSidPtr *sids;
	} LsarSidArray;

	typedef enum {
		SID_NAME_USE_NONE = 0, /* NOTUSED */
		SID_NAME_USER     = 1, /* user */
		SID_NAME_DOM_GRP  = 2, /* domain group */
		SID_NAME_DOMAIN   = 3, /* domain: don't know what this is */
		SID_NAME_ALIAS    = 4, /* local group */
		SID_NAME_WKN_GRP  = 5, /* well-known group */
		SID_NAME_DELETED  = 6, /* deleted account: needed for c2 rating */

		[size_is(num_sids)] LsarSidPtr *sids;
	} LsarSidArray;

	typedef enum {
		SID_NAME_USE_NONE = 0, /* NOTUSED */
		SID_NAME_USER     = 1, /* user */
		SID_NAME_DOM_GRP  = 2, /* domain group */
		SID_NAME_DOMAIN   = 3, /* domain: don't know what this is */
		SID_NAME_ALIAS    = 4, /* local group */
		SID_NAME_WKN_GRP  = 5, /* well-known group */
		SID_NAME_DELETED  = 6, /* deleted account: needed for c2 rating */

            this.domainName = domainNameString.check(pacStream.readString());

            // ID for domain (used with relative IDs to get SIDs)
            SID domainId = null;
            if (domainIdPointer != 0) {
                domainId = pacStream.readSid();
            }

            // Extra SIDs data
            PacSidAttributes[] extraSidAtts = {};

        String root = "share";
        String path = "\\folder";
        String fullPath = "\\" + domain + "\\" + root + path; // Should be "\domain.com\share\folder"

        lenient().when(smbTransport.getDfsReferrals(auth, fullPath, 0)).thenReturn(dfsReferral);

        assertEquals(dfsReferral, dfs.getReferral(smbTransport, domain, root, path, auth));
    }

    @Test

* **TCP weiß nichts über „Domains“**. Nur über IP-Adressen.
    * Die Informationen über die angeforderte **spezifische Domain** befinden sich in den **HTTP-Daten**.
* Die **HTTPS-Zertifikate** „zertifizieren“ eine **bestimmte Domain**, aber das Protokoll und die Verschlüsselung erfolgen auf TCP-Ebene, **ohne zu wissen**, um welche Domain es sich handelt.

        // Test User SID (type 1)
        assertEquals("1Test User", sambaHelper.getAccountId(createMockSID(1, "Test User")));

        // Test Domain Group SID (type 2)
        assertEquals("2Domain Group", sambaHelper.getAccountId(createMockSID(2, "Domain Group")));

        // Test Alias SID (type 4, mapped to 2)
        assertEquals("2Local Group", sambaHelper.getAccountId(createMockSID(4, "Local Group")));