referral.pathConsumed = 20;
        referral.server = "testServer";
        referral.share = "testShare";
        referral.link = "testLink";
        referral.path = "/test/path";
        referral.ttl = 300;
        referral.expiration = 1234567890L;
        referral.resolveHashes = true;

        // When
        String expectedString =

version: '3.7'

# Settings and configurations that are common for all containers
x-minio-common: &minio-common
  image: quay.io/minio/minio:${JOB_NAME}
  command: server --console-address ":9001" edata{1...4}
  expose:
    - "9000"
    - "9001"
  environment:
    MINIO_CI_CD: "on"
    MINIO_ROOT_USER: "minio"
    MINIO_ROOT_PASSWORD: "minio123"
    MINIO_KMS_SECRET_KEY: "my-minio-key:OSMM+vkKUTCvQs9YL/CVMIMt43HFhkUpqJxTmGl6rYw="
  healthcheck:

        // Create a buffer representing a valid DFS referral response
        // Need to include space for actual string data
        int stringDataStart = 28; // After the referral structure
        String testPath = "\\server\\share";
        byte[] pathBytes = testPath.getBytes(java.nio.charset.StandardCharsets.UTF_16LE);
        int bufferSize = stringDataStart + pathBytes.length + 2; // +2 for null terminator

# How to secure access to MinIO on Kubernetes with TLS [![Slack](https://slack.min.io/slack?type=svg)](https://slack.min.io)

This document explains how to configure MinIO server with TLS certificates on Kubernetes.

## 1. Prerequisites

- Familiarity with [MinIO deployment process on Kubernetes](https://docs.min.io/community/minio-object-store/operations/deployments/kubernetes.html).

- Kubernetes cluster with `kubectl` configured.

    }

    synchronized void insert(final String path, final DfsReferral dr) {
        int s1, s2;
        String server, share, key;

        if (DISABLED) {
            return;
        }

        s1 = path.indexOf('\\', 1);
        s2 = path.indexOf('\\', s1 + 1);
        server = path.substring(1, s1);
        share = path.substring(s1 + 1, s2);

    @Test
    @DisplayName("handleDFSReferral handles null referral and empty path")
    void handleDfsReferralNullAndEmpty() {
        when(locator.handleDFSReferral(null, "")).thenReturn("smb://server/share/");
        assertEquals("smb://server/share/", locator.handleDFSReferral(null, ""));
        verify(locator).handleDFSReferral(null, "");
        verifyNoMoreInteractions(locator);
    }

rm -rf /tmp/ldap{1..4}
rm -rf /tmp/ldap1{1..4}

if [ ! -f ./mc ]; then
	wget --quiet -O mc https://dl.minio.io/client/mc/release/linux-amd64/mc &&
		chmod +x mc
fi

mc -v

# Start LDAP server
echo "Copying docs/distributed/samples/bootstrap-complete.ldif => minio-iam-testing/ldap/50-bootstrap.ldif"
cp docs/distributed/samples/bootstrap-complete.ldif minio-iam-testing/ldap/50-bootstrap.ldif || exit 1
cd ./minio-iam-testing

        serverAddress = InetAddress.getByName("192.168.1.100");
        registration = new WitnessRegistration("\\\\server\\share", serverAddress, WitnessServiceType.FILE_SERVER_WITNESS);
    }

    @Test
    void testRegistrationCreation() {
        assertNotNull(registration.getRegistrationId());
        assertEquals("\\\\server\\share", registration.getShareName());
        assertEquals(serverAddress, registration.getServerAddress());

          // TLSv1.2 Events
          // Produced ClientHello handshake message
          // Consuming ServerHello handshake message
          // Consuming server Certificate handshake message
          // Consuming server CertificateStatus handshake message
          // Found trusted certificate
          // Consuming ECDH ServerKeyExchange handshake message
          // Consuming ServerHelloDone handshake message

        t1.numThreads = 2;
        t1.url = "smb://server1/share/file.txt";

        t2.numThreads = 5;
        t2.url = "smb://server2/share/file.txt";

        // Verify independence
        assertEquals(2, t1.numThreads, "t1 should have its own numThreads value");
        assertEquals(5, t2.numThreads, "t2 should have its own numThreads value");
        assertEquals("smb://server1/share/file.txt", t1.url, "t1 should have its own URL");