// Create a real NdrBuffer mock that can handle the deferred field access
            // But only test the non-deferred parts to avoid field mocking issues

            // When: Trying to encode (may throw exception due to deferred buffer)
            // Then: Should at least call the basic encoding methods before hitting deferred
            assertThrows(Exception.class, () -> {

        Smb2TreeConnectRequest reqWithNull = new Smb2TreeConnectRequest(mockConfig, null);

        // Then - should not throw during construction
        assertNotNull(reqWithNull);

        // But should throw when trying to use the null path
        assertThrows(NullPointerException.class, () -> {
            reqWithNull.size();
        });
    }

    @Test

        Field headerStartField = ServerMessageBlock2.class.getDeclaredField("headerStart");
        headerStartField.setAccessible(true);
        headerStartField.set(response, 0);

        // When & Then - should throw when trying to read beyond buffer
        assertThrows(ArrayIndexOutOfBoundsException.class, () -> response.readBytesWireFormat(smallBuffer, bodyStart));
    }

    @Test
    @DisplayName("Should handle Reserved2 field correctly")

        Smb2CloseRequest requestWithNull = new Smb2CloseRequest(mockConfig, null, testFileName);
        byte[] buffer = new byte[256];

        // Should throw NullPointerException when trying to copy null array
        assertThrows(NullPointerException.class, () -> {
            requestWithNull.writeBytesWireFormat(buffer, 0);
        });
    }

    @Test

// replicating objects. It's enabled by default. To disable it, set:
//
//	MINIO_KMS_REPLICATE_KEYID=off
//
// Some deployments use different KMS clusters with destinct keys on
// each site. Trying to replicate the KMS key ID can cause requests
// to fail in such setups.
func ReplicateKeyID() bool { return replicateKeyID() }

// ConnectionOptions is a structure containing options for connecting
// to a KMS.

                return found;
            }
        }

        IOException ex = null;
        for (final Address addr : addrs) {
            if (log.isDebugEnabled()) {
                log.debug("Trying address {}", addr);
            }
            try (SmbTransportImpl trans = getSmbTransport(tf, addr, port, exclusive, forceSigning).unwrap(SmbTransportImpl.class)) {
                try {

 *     return myServer;
 *   }
 *
 *   @Override
 *   public void close() throws IOException {
 *     serverSocket.close();
 *   }
 * }
 * }
 *
 * <p id="cleaner">Here is how you might achieve the same thing using {@link java.lang.ref.Cleaner
 * Cleaner}, if you are using a Java version where that is available:
 *
 * {@snippet :
 * public class MyServer implements Closeable {

So, to avoid ID collisions, when creating the JWT token for the user, you could prefix the value of the `sub` key, e.g. with `username:`. So, in this example, the value of `sub` could have been: `username:johndoe`.

The important thing to keep in mind is that the `sub` key should have a unique identifier across the entire application, and it should be a string.

## Check it { #check-it }

        .addEqualityGroup(ImmutableLongArray.of(1, 3))
        .addEqualityGroup(ImmutableLongArray.of(1, 2, 3))
        .testEquals();
  }

  /**
   * This is probably a weird and hacky way to test what we're really trying to test, but hey, it
   * caught a bug.
   */
  public void testTrimmed() {
    ImmutableLongArray iia = ImmutableLongArray.of(0, 1, 3);
    assertDoesntActuallyTrim(iia);

     * crc2 = int2
     * crc3 = int3
     *
     * ...so we set crc0 so that computeForWord(crc0) = -1 and xoring it with the first int
     * gives us the desired result.  computeForWord(0) == 0, so all the others do the right thing.
     */
    private int crc0 = INVERSE_COMPUTE_FOR_WORD_OF_ALL_1S;
    private int crc1 = 0;
    private int crc2 = 0;
    private int crc3 = 0;

    @Override
    protected void process(ByteBuffer bb) {