* This class encapsulates a SID and its attribute flags as used in Kerberos PAC data.
 */
public class PacSidAttributes {

    private final SID id;
    private final int attributes;

    /**
     * Constructs a new PacSidAttributes instance.
     *
     * @param id the Security Identifier
     * @param attributes the attribute flags associated with the SID
     */

    @DisplayName("Test setQueryFlags method")
    void testSetQueryFlags() {
        request = new Smb2QueryDirectoryRequest(mockConfig);
        byte flags = Smb2QueryDirectoryRequest.SMB2_RESTART_SCANS | Smb2QueryDirectoryRequest.SMB2_RETURN_SINGLE_ENTRY;

        request.setQueryFlags(flags);

        // Verify by writing to buffer and checking the queryFlags position
        byte[] buffer = new byte[1024];

	Usage:  "Generate format.json files for an erasure server pool",
	Flags:  append(fmtGenFlags, GlobalFlags...),
	Action: fmtGenMain,
	Hidden: true,
	CustomHelpTemplate: `NAME:
  {{.HelpName}} - {{.Usage}}

USAGE:
  {{.HelpName}} {{if .VisibleFlags}}[FLAGS] {{end}}DIR1 [DIR2..]
  {{.HelpName}} {{if .VisibleFlags}}[FLAGS] {{end}}DIR{1...64}
  {{.HelpName}} {{if .VisibleFlags}}[FLAGS] {{end}}DIR{1...64} DIR{65...128}

DIR:

    @Nested
    @DisplayName("Constants Validation Tests")
    class ConstantsValidationTests {

        @Test
        @DisplayName("All fragment flags should have unique values")
        void testFragmentFlagsUniqueness() {
            // Verify that fragment flags are unique and follow bit pattern
            assertEquals(1, Integer.bitCount(DcerpcConstants.DCERPC_FIRST_FRAG), "DCERPC_FIRST_FRAG should be a single bit");

            java.lang.reflect.Field flagsField = jcifs.dcerpc.DcerpcMessage.class.getDeclaredField("flags");
            flagsField.setAccessible(true);
            assertEquals(0x01 | 0x02, flagsField.get(msrpcSamrOpenAlias),
                    "flags should be initialized to DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG");
        } catch (NoSuchFieldException | IllegalAccessException e) {

        }

        /**
         * DFS flags
         */
        public int flags;
        /**
         * The DFS name
         */
        public String dfs_name;

        @Override
        public void encode(NdrBuffer _dst) throws NdrException {
            _dst.align(4);
            _dst.enc_ndr_long(this.flags);
            _dst.enc_ndr_referent(this.dfs_name, 1);

        return new Smb2CloseResponse(tc.getConfig(), this.fileId, this.fileName);
    }

    /**
     * Set the close flags
     *
     * @param flags
     *            the flags to set
     */
    public void setCloseFlags(final int flags) {
        this.closeFlags = flags;
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.internal.CommonServerMessageBlockRequest#size()
     */

        // Verify lease state at offset 40 (24 + 16 for key)
        assertEquals(testState, SMBUtil.readInt4(buffer, 40));

        // Verify lease flags at offset 44 (40 + 4 for state)
        assertEquals(0, SMBUtil.readInt4(buffer, 44));

        // Verify lease duration at offset 48 (44 + 4 for flags) - should be 0 (reserved)
        assertEquals(0, SMBUtil.readInt8(buffer, 48));
    }

    }

    boolean allow;
    int flags;
    int access;
    SID sid;

    @Override
    public boolean isAllow() {
        return this.allow;
    }

    @Override
    public boolean isInherited() {
        return (this.flags & FLAGS_INHERITED) != 0;
    }

    @Override
    public int getFlags() {
        return this.flags;
    }

    @Override

    # sessionToken: SESSION-TOKEN # Optional only available when rotating credentials are used

  # NOTE: All flags are optional
  # - filtering criteria only applies for all source objects match the criteria
  # - configurable notification endpoints
  # - configurable retries for the job (each retry skips successfully previously replaced objects)
  flags:
    filter:
      newerThan: "7d10h31s" # match objects newer than this value (e.g. 7d10h31s)