when(peek.getReadDataAvailable()).thenReturn(7);
        when(ioResp.getOutputData()).thenReturn(peek);

        when(tree.send(any(Smb2IoctlRequest.class), eq(RequestParam.NO_RETRY))).thenReturn(ioResp);

        // Act
        int available = stream.available();

        // Assert
        assertEquals(7, available, "Should return available bytes reported by server");

        SmbRandomAccessFile raf = spy(newInstance("rw", false, true, false));
        SmbFileHandleImpl fh = mock(SmbFileHandleImpl.class);
        doReturn(fh).when(raf).ensureOpen();

        // Act
        raf.open();

        // Assert: open() ensures handle and closes it via try-with-resources
        verify(raf, times(1)).ensureOpen();
        verify(fh, times(1)).close();
    }

    @Test

## Attribution

            }
            resp.received();
            return resp;
        });

        DirFileEntryEnumIterator1 it = new DirFileEntryEnumIterator1(tree, parent, "*", null, 0);

        // Act & Assert: entries a, b, c (dot entries filtered) then end
        assertTrue(it.hasNext());
        assertEquals("a", it.next().getName());
        assertTrue(it.hasNext());
        assertEquals("b", it.next().getName());

        void testDcerpcUuidSyntaxNdr() {
            // Arrange
            String expectedUuid = "8a885d04-1ceb-11c9-9fe8-08002b104860";

            // Act
            String actualUuid = DcerpcConstants.DCERPC_UUID_SYNTAX_NDR.toString().toLowerCase();

            // Assert
            assertNotNull(DcerpcConstants.DCERPC_UUID_SYNTAX_NDR, "DCERPC_UUID_SYNTAX_NDR should not be null");

            }
        }
        return pipeIn;
    }

    /**
     * Return the <code>OutputStream</code> used to write
     * information to this pipe instance. The act of writing data
     * to this stream will result in response data recieved in the
     * <code>InputStream</code> associated with this Named Pipe

        // Arrange: first ensureTreeConnected comes from pipe
        when(pipe.ensureTreeConnected()).thenReturn(tree);
        when(tree.acquire()).thenReturn(tree); // method returns itself per implementation

        // Act: call twice
        try (SmbTreeHandleImpl t1 = target.ensureTreeConnected(); SmbTreeHandleImpl t2 = target.ensureTreeConnected()) {
            assertSame(tree, t1);
            assertSame(tree, t2);
        }

- Run MinIO without a KMS. In this case all IAM data will be stored in plain-text.
- Run MinIO with a single secret key. MinIO supports a static cryptographic key
  that can act as minimal KMS. With this method all IAM data will be stored
  encrypted. The encryption key has to be passed as environment variable.
- Run MinIO with KES (minio/kes) in combination with any supported KMS as

        when(this.mechContext.getFlags()).thenReturn(0x1234);
        when(this.mechContext.initSecContext(any(byte[].class), eq(0), eq(0))).thenReturn(new byte[] { 0x01, 0x02 });

        // Act: len==0 triggers initial token construction
        byte[] out = ctx.initSecContext(null, 0, 0);

        // Assert: returns a SPNEGO token (opaque here but non-null/non-empty)
        assertNotNull(out);

    @Test
    @DisplayName("ensureDFSResolved forwards to tree connection with locator")
    void ensureDFSResolvedDelegates() throws Exception {
        // Confirms DFS resolution is delegated with the correct locator
        // Act
        handle.ensureDFSResolved();
        // Assert & interaction verify
        verify(treeConnection).ensureDFSResolved(resourceLoc);
    }

    @Test