mockedStaticAuthData.when(() -> KerberosAuthData.parse(eq(1), eq(new byte[] { 0x01 }), any(Map.class)))
                .thenReturn(Collections.singletonList(mockAuthData1));
        mockedStaticAuthData.when(() -> KerberosAuthData.parse(eq(2), eq(new byte[] { 0x02 }), any(Map.class)))
                .thenReturn(Collections.singletonList(mockAuthData2));

        // Construct a token with two authorization entries

        void shouldBeApplicableWhenPluginsOptionTrue() {
            UpgradeOptions options = mock(UpgradeOptions.class);
            when(options.plugins()).thenReturn(Optional.of(true));
            when(options.all()).thenReturn(Optional.empty());

            UpgradeContext context = createMockContext(options);

            echoResponse.setDigest(mockDigest);
            setStatus(echoResponse, NtStatus.NT_STATUS_SUCCESS);

            when(mockConfig.isRequireSecureNegotiate()).thenReturn(true);
            when(mockDigest.verify(buffer, 0, 100, 0, echoResponse)).thenReturn(false);

            boolean result = echoResponse.verifySignature(buffer, 0, 100);

            assertTrue(result);
            assertFalse(echoResponse.isVerifyFailed());

    void testGetPreNTLMResponse_basicAndInteractions() throws Exception {
        // Arrange
        when(cifsContext.getConfig()).thenReturn(configuration);
        when(configuration.getOemEncoding()).thenReturn("Cp850");
        String password14 = "ABCDEFGHIJKLMN"; // 14 chars
        String password15 = "ABCDEFGHIJKLMNO"; // 15 chars, same first 14

                // Update context to use the temp directory
                when(context.invokerRequest.cwd()).thenReturn(tempDir);

                // Mock successful strategy execution
                when(mockOrchestrator.executeStrategies(Mockito.any(), Mockito.any()))
                        .thenReturn(UpgradeResult.empty());

                checkGoal.execute(context);

    void nameFilterAccepts(String acceptedName) throws Exception {
        // Arrange
        stubAcquireReturnsSelf();
        when(nameFilter.accept(any(), any())).thenReturn(false);
        when(nameFilter.accept(parent, acceptedName)).thenReturn(true);

        FileEntry initial = entry("first");
        FileEntry[] page1 = new FileEntry[] { entry("."), entry(".."), entry("rejected"), entry(acceptedName) };

            // Create context with --model-version=4.1.0 option to trigger namespace update
            UpgradeOptions options = mock(UpgradeOptions.class);
            when(options.modelVersion()).thenReturn(Optional.of("4.1.0"));
            when(options.all()).thenReturn(Optional.empty());
            UpgradeContext context = createMockContext(options);

            UpgradeResult result = strategy.doApply(context, pomMap);

        packet.questionType = NameServicePacket.NB;
        packet.questionClass = NameServicePacket.IN;

        when(mockQuestionName.writeWireFormat(any(byte[].class), anyInt())).thenReturn(10); // Mock name length

        int written = packet.writeQuestionSectionWireFormat(dst, 0);
        assertEquals(14, written); // 10 (name) + 2 (type) + 2 (class)
        verify(mockQuestionName).writeWireFormat(dst, 0);

        MockitoAnnotations.openMocks(this);
        when(mockConfig.getMaximumBufferSize()).thenReturn(65535);
        when(mockConfig.getTransactionBufferSize()).thenReturn(65535);
        when(mockConfig.isUseUnicode()).thenReturn(true);
        when(mockConfig.isForceUnicode()).thenReturn(false);
        when(mockConfig.getOemEncoding()).thenReturn("ASCII");
    }

    @Test
    @DisplayName("Test constructor with standard path")

    void createContext_forceFallback_triggersNtlmAndFailsOnNonNtlmToken() throws CIFSException {
        when(tc.getConfig()).thenReturn(config);
        when(config.isAllowNTLMFallback()).thenReturn(true);
        when(config.isUseRawNTLM()).thenReturn(false);

        // Enable NTLM fallback by providing NTLM creds in constructor