when(mockSearchResponse.getScrollId()).thenReturn("scroll1", "scroll1");
        when(mockSearchResponse.getHits()).thenReturn(mockSearchHits);
        when(mockSearchHits.getHits()).thenReturn(new SearchHit[] { mockHit }, new SearchHit[0]);
        when(mockHit.getIndex()).thenReturn("test-index");
        when(mockHit.getId()).thenReturn("doc1");

            return null;
        }).when(mockDcerpcHandle).sendrecv(any(MsrpcSamrOpenDomain.class));

        SamrDomainHandle handle = new SamrDomainHandle(mockDcerpcHandle, mockPolicyHandle, access, mockSid);

        IOException expectedException = new IOException("Network error during close");
        // Simulate IOException during close RPC call

        verify(tree).send(request, RequestParam.NO_TIMEOUT, RequestParam.NO_RETRY);
    }

    @Test
    @DisplayName("send throws CIFSException for null request when implementation does")
    void send_nullRequest_throws() throws Exception {
        // Arrange
        when(tree.send(isNull())).thenThrow(new CIFSException("null request"));

        // Act
        CIFSException ex = assertThrows(CIFSException.class, () -> tree.send(null));

        when(kerberosKey.getKeyType()).thenReturn(ENCRYPTION_TYPE);

        try (MockedStatic<KerberosEncData> mockedEncData = Mockito.mockStatic(KerberosEncData.class)) {
            mockedEncData.when(() -> KerberosEncData.decrypt(ENCRYPTED_DATA, kerberosKey, ENCRYPTION_TYPE)).thenReturn(decryptedData);

            // When

     */
    @Test
    void testGetKey_KeyExists() throws LoginException {
        when(key1.getKeyType()).thenReturn(KEY_TYPE_1);
        when(key2.getKeyType()).thenReturn(KEY_TYPE_2);
        Set<Object> privateCredentials = new HashSet<>();
        privateCredentials.add(key1);
        privateCredentials.add(key2);
        when(subject.getPrivateCredentials()).thenReturn(privateCredentials);

        // Default configuration
        when(mockConfig.isDfsDisabled()).thenReturn(false);
        when(mockConfig.isEncryptionEnabled()).thenReturn(true);
        when(mockConfig.getMinimumVersion()).thenReturn(DialectVersion.SMB202);
        when(mockConfig.getMaximumVersion()).thenReturn(DialectVersion.SMB311);
        when(mockConfig.getTransactionBufferSize()).thenReturn(65536);
        when(mockConfig.getReceiveBufferSize()).thenReturn(65536);

        headerStartField.setAccessible(true);
        headerStartField.set(response, 0);

        // When
        int bytesRead = response.readBytesWireFormat(buffer, bodyStart);

        // Then
        // When dataLength is 0, it returns max(16, dataOffset + 0 - bodyStart) = max(16, 80) = 80
        assertEquals(80, bytesRead);
        assertEquals(0, response.getDataLength());

    @DisplayName("Test isSigningEnforced returns true when signing is enforced")
    void testIsSigningEnforcedReturnsTrue() {
        // Given
        when(negotiationRequest.isSigningEnforced()).thenReturn(true);

        // When
        boolean result = negotiationRequest.isSigningEnforced();

        // Then
        assertTrue(result, "isSigningEnforced should return true when signing is enforced");

    void testMessageConstructor() {
        // Given & When
        CIFSUnsupportedCryptoException exception = new CIFSUnsupportedCryptoException(CRYPTO_ERROR_MESSAGE);

        // Then
        assertEquals(CRYPTO_ERROR_MESSAGE, exception.getMessage(), "Message should be preserved");
        assertNull(exception.getCause(), "Cause should be null when not specified");
    }

    @ParameterizedTest

        // Arrange
        when(mockConnection.getRequestMethod()).thenReturn("GET");
        when(mockConnection.getAllowUserInteraction()).thenReturn(true);
        when(mockConnection.getDoInput()).thenReturn(true);
        when(mockConnection.getDoOutput()).thenReturn(true);
        when(mockConnection.getIfModifiedSince()).thenReturn(12345L);
        when(mockConnection.getUseCaches()).thenReturn(false);