break;
            default:
                throw new PACDecodingException("Invalid field in kerberos ticket");
            }
        }
    }

    /**
     * Get the AP options flags.
     *
     * @return the AP options byte
     */
    public byte getApOptions() {
        return this.apOptions;
    }

    /**
     * Get the Kerberos ticket from this AP request.
     *

     */
    public boolean isLoggedInAsGuest() {
        return (this.sessionFlags & (SMB2_SESSION_FLAGS_IS_GUEST | SMB2_SESSION_FLAGS_IS_NULL)) != 0;
    }

    /**
     * Gets the session flags from the response
     *
     * @return the sessionFlags
     */
    public int getSessionFlags() {
        return this.sessionFlags;
    }

    /**

lifetime based on Response cache headers.

 - CallStart 
 - **CacheMiss**
 - ProxySelectStart
 - ... Standard Events ...
 - CallEnd
        
### Conditional Cache Hit
 
When cache flags require checking the cache results are still valid an early cacheConditionalHit event is
received followed by a cache hit or miss.  Critically in the cache hit scenario the server won’t send the response body.

import org.codelibs.jcifs.smb.ntlmssp.Type3Message;

/**
 * JcifsEngine is a NTLM Engine implementation based on JCIFS.
 *
 * @author shinsuke
 *
 */
public class JcifsEngine implements NTLMEngine {

    /** Flags for Type 1 NTLM message. */
    protected static final int TYPE_1_FLAGS = NtlmFlags.NTLMSSP_NEGOTIATE_56 | NtlmFlags.NTLMSSP_NEGOTIATE_128

        }

        this.securityMode = SMBUtil.readInt2(buffer, bufferIndex + 2);
        // Validate security mode flags
        if ((this.securityMode & ~(Smb2Constants.SMB2_NEGOTIATE_SIGNING_ENABLED | Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED)) != 0) {
            log.warn("Server returned unknown security mode flags: 0x{}", Integer.toHexString(this.securityMode));
        }
        bufferIndex += 4;

        when(transport.isFailed()).thenReturn(true);
        assertFalse(session.isConnected());
        assertTrue(session.isFailed());
    }

    @Test
    @DisplayName("encryption: flags, encryption, and decryption delegation")
    void testEncryptionDelegation() throws Exception {
        SmbSessionImpl session = newSession();

        // No encryption context -> throws

     * @return the oplockLevel
     */
    public final byte getOplockLevel() {
        return this.oplockLevel;
    }

    /**
     * Get the open flags returned by the server
     * @return the flags
     */
    public final byte getOpenFlags() {
        return this.openFlags;
    }

    /**
     * Get the create action taken by the server
     * @return the createAction

public class SmbCopyUtilTest {

    // --- Tests for openCopyTargetFile ---

    @ParameterizedTest
    @ValueSource(booleans = { true, false })
    @DisplayName("openCopyTargetFile sets correct access flags depending on alsoRead")
    void openCopyTargetFile_accessMask_respectsAlsoRead(boolean alsoRead) throws Exception {
        // Arrange
        SmbFile dest = mock(SmbFile.class);

    /** Flag indicating whether thumbnail generation is enabled. */
    protected boolean thumbnailSupport;

    /**
     * Hook method called before action execution. Sets up search-related flags and
     * registers popular words if enabled.
     *
     * @param runtime the action runtime context
     * @return the action response, or null to continue with normal processing
     */
    @Override

        @Override
        public Configuration getConfig() {
            return null; // Not relevant for AbstractCIFSContext tests
        }

        @Override
        public SmbPipeResource getPipe(String name, int flags) {
            return null; // Not relevant for AbstractCIFSContext tests
        }

        @Override
        public SmbResource get(String key) {