verify(mockDelegate).getLanManCompatibility();
        verify(mockDelegate).isAllowNTLMFallback();
        verify(mockDelegate).isUseRawNTLM();
        verify(mockDelegate).isDisablePlainTextPasswords();
        verify(mockDelegate).getGuestUsername();
        verify(mockDelegate).getGuestPassword();
        verify(mockDelegate).isAllowGuestFallback();
    }

    @Test

        when(mockRequest.getCommand()).thenReturn((int) ServerMessageBlock.SMB_COM_WRITE);

        digest.sign(data, 0, data.length, mockRequest, mockResponse);

        verify(mockRequest).setSignSeq(10);
        verify(mockResponse).setSignSeq(11);
    }

    @Test
    @DisplayName("Test sign method with bypass enabled")
    void testSignWithBypass() {

            int result = requestWithData.encode(testBuffer, 0);
            assertTrue(result > 0);

            // Verify header
            for (int i = 0; i < 8; i++) {
                assertEquals((byte) 0xFF, testBuffer[i]);
            }

            // Verify name was copied
            byte[] nameCheck = new byte[testName.length];
            System.arraycopy(testBuffer, 8, nameCheck, 0, testName.length);

            entry.encode(mockNdrBuffer);

            // Then: Should encode all fields
            verify(mockNdrBuffer).align(4);
            verify(mockNdrBuffer).enc_ndr_long(1);
            verify(mockNdrBuffer).enc_ndr_short((short) 4);
            verify(mockNdrBuffer).enc_ndr_short((short) 6);
            verify(mockNdrBuffer).enc_ndr_referent(entry.name.buffer, 1);
        }

        @Test

    void testConstructorInitialization() {
        // Verify level is set to 200 for DFS root enumeration
        assertEquals(200, dfsRootEnum.level);

        // Verify DCE/RPC message properties
        assertEquals(0, dfsRootEnum.getPtype());
        assertEquals(DcerpcConstants.DCERPC_FIRST_FRAG | DcerpcConstants.DCERPC_LAST_FRAG, dfsRootEnum.getFlags());

        // Verify DFS enumeration structure
        assertNotNull(dfsRootEnum.info);

        // Verify filter interactions: not called for '.' and '..', called for others
        verify(nameFilter, never()).accept(parent, ".");
        verify(nameFilter, never()).accept(parent, "..");
        ArgumentCaptor<String> nameCaptor = ArgumentCaptor.forClass(String.class);
        verify(nameFilter, atLeast(1)).accept(eq(parent), nameCaptor.capture());

        // Then
        // Verify that the 'sam' field is set correctly
        assertEquals(mockSamArray, msrpc.sam, "The 'sam' field should be initialized with the provided SamrSamArray.");

        // Verify that the 'ptype' field is set to 0
        assertEquals(0, msrpc.getPtype(), "The 'ptype' field should be initialized to 0.");

        // Verify that the 'flags' field is set to DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG

		if err != nil {
			writeSTSErrorResponse(ctx, w, ErrSTSInvalidClientCertificate, err)
			return
		}
	} else {
		// Technically, there is no security argument for verifying the key usage
		// when we don't verify that the certificate has been issued by a trusted CA.
		// Any client can create a certificate with arbitrary key usage settings.
		//
		// However, this check ensures that a certificate with an invalid key usage

    }

    /**
     * Verify that the encode method forwards the value to NdrBuffer.
     */
    @Test
    @DisplayName("Encode should call NdrBuffer.enc_ndr_hyper with correct value")
    public void testEncodeInteraction() throws NdrException {
        NdrBuffer buf = mock(NdrBuffer.class);
        NdrHyper hyper = new NdrHyper(12345L);
        hyper.encode(buf);
        verify(buf, times(1)).enc_ndr_hyper(12345L);
    }

        // Then: Should create successfully
        assertNotNull(iterator);
        assertFalse(iterator.hasNext()); // Empty results

        // Verify tree handle was acquired
        verify(treeHandle).acquire();

        // Cleanup
        iterator.close();
    }

    @Test
    @DisplayName("Constructor should handle workgroup type with non-empty host")