* <p>
     * Specifically, if the SID has
     * been resolved and it is not a domain SID or builtin account,
     * the full DOMAIN\name form of the account will be
     * returned (e.g. MYDOM\alice or MYDOM\Domain Users).
     * If the SID has been resolved but it is is a domain SID,
     * only the domain name will be returned (e.g. MYDOM).
     * If the SID has been resolved but it is a builtin account,

     * @param serviceName
     *            JAAS configuration name
     * @param domain the domain for authentication
     * @param username the username for authentication
     * @param password the password for authentication
     */
    public JAASAuthenticator(String serviceName, String domain, String username, String password) {
        super(null, domain, username, password);
        this.serviceName = serviceName;
    }

    /**

    }

    // It is not any kind of IP address; must be a domain name or invalid.

    // TODO(user): different versions of this for different factories?
    InternetDomainName domain = InternetDomainName.from(host);

    if (domain.hasPublicSuffix()) {
      return new HostSpecifier(domain.toString());
    }

    throw new IllegalArgumentException(
        "Domain name does not have a recognized public suffix: " + host);
  }

        }

        @Test
        @DisplayName("Should fixup domain")
        void testFixupDomain() {
            String domain = "example.com";

            // Test with mock
            doNothing().when(mockReferralData).fixupDomain(domain);
            mockReferralData.fixupDomain(domain);
            verify(mockReferralData, times(1)).fixupDomain(domain);

    /**
     * Create username/password credentials with specified domain
     *
     * @param domain the domain for authentication
     * @param username the username for authentication
     * @param password the password for authentication
     */
    public NtlmPasswordAuthenticator(String domain, String username, String password) {
        this(domain, username, password, (AuthenticationType) null);
    }

    /**

    void testNTOWFv2_overloadsAndDomainSensitivity() {
        // Arrange
        String domain = "Domain";
        String user = "User";
        String password = "password";

        // Act
        byte[] viaHash = NtlmUtil.nTOWFv2(domain, user, NtlmUtil.getNTHash(password));
        byte[] viaPassword = NtlmUtil.nTOWFv2(domain, user, password);

    }

    /**
     * Returns the domain in which the user has an account.
     *
     * @return A <code>String</code> containing the domain for the user.
     */
    public String getDomain() {
        return this.domain;
    }

    /**
     * Sets the domain for this message.
     *
     * @param domain
     *            The domain.
     */
    public void setDomain(final String domain) {

    }

    /**
     * Test domain constructor with char array
     */
    @Test
    public void testDomainCharArrayConstructor() {
        char[] testPassword = "DomainPass321!".toCharArray();
        NtlmPasswordAuthenticator auth = new NtlmPasswordAuthenticator("DOMAIN", "testuser", testPassword);

        assertEquals("DOMAIN", auth.getUserDomain());

            // Domain type: domain name as-is, account name empty
            SID domain = new SID(buildSidT((byte) 1, ident, 10, 20), jcifs.SID.SID_TYPE_DOMAIN, "MYDOM", "ignored", false);
            assertEquals("MYDOM", domain.getDomainName());
            assertEquals("", domain.getAccountName());

            // User in regular domain

        // Test User SID (type 1)
        assertEquals("1Test User", sambaHelper.getAccountId(createMockSID(1, "Test User")));

        // Test Domain Group SID (type 2)
        assertEquals("2Domain Group", sambaHelper.getAccountId(createMockSID(2, "Domain Group")));

        // Test Alias SID (type 4, mapped to 2)
        assertEquals("2Local Group", sambaHelper.getAccountId(createMockSID(4, "Local Group")));