*/
package jcifs.smb;

import jcifs.CIFSException;

/**
 * Exception thrown when an SMB protocol downgrade attack is detected.
 * Indicates that the negotiated protocol version is lower than expected or required.
 *
 * @author mbechler
 *
 */
public class SMBProtocolDowngradeException extends CIFSException {

    /**

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
package jcifs.internal;

/**
 * Interface for SMB protocol negotiation request messages.
 * Represents the client's request to negotiate SMB protocol version and capabilities
 * with the server, including security requirements like message signing.
 *
 * @author mbechler
 */
public interface SmbNegotiationRequest {

    /**

        when(transport.isSMB2()).thenReturn(false);
        when(transport.getContext()).thenReturn(context);
        when(session.getTargetHost()).thenReturn("localhost");

        // Mock negotiate response for SMB1
        SmbComNegotiateResponse nego = mock(SmbComNegotiateResponse.class);
        ServerData serverData = new ServerData();
        when(nego.getServerData()).thenReturn(serverData);

        when(negotiateResponse.getSelectedPreauthHash()).thenReturn(1); // SHA-512
        setPrivateField(transport, "smb2", true);
        setPrivateField(transport, "negotiated", negotiateResponse);

        int threadCount = 10;
        CountDownLatch startLatch = new CountDownLatch(1);
        CountDownLatch doneLatch = new CountDownLatch(threadCount);

        when(httpSession.getAttribute("NtlmHttpAuth")).thenReturn(null);

        // Create a custom filter that overrides negotiate to test skipAuthentication
        NtlmHttpFilter customFilter = new NtlmHttpFilter() {
            @Override
            protected NtlmPasswordAuthentication negotiate(HttpServletRequest req, HttpServletResponse resp, boolean skipAuthentication)
                    throws IOException, ServletException {

        when(negotiationResponse.canReuse(any(CIFSContext.class), anyBoolean())).thenReturn(true);

        // Use reflection to set the negotiated response
        Field negotiatedField = SmbTransportImpl.class.getDeclaredField("negotiated");
        negotiatedField.setAccessible(true);
        negotiatedField.set(initial, negotiationResponse);

        // When: Request connection with signing enforced

    /**
     * Constructs a new SmbUnsupportedOperationException with a default message
     */
    public SmbUnsupportedOperationException() {
        super("Operation is not supported with the negotiated capabilities");
    }

    /**
     * Constructs a new SmbUnsupportedOperationException with the specified message
     * @param msg the detail message
     */

import jcifs.config.PropertyConfiguration;
import jcifs.internal.SMBProtocolDecodingException;
import jcifs.internal.smb2.nego.CompressionNegotiateContext;

/**
 * Comprehensive tests for SMB3 compression negotiate context.
 */
public class CompressionNegotiateContextTest {

    private Configuration config;
    private CompressionNegotiateContext context;

    @BeforeEach
    public void setUp() throws Exception {

        try {
            resp = send(req, RequestParam.NO_RETRY);
        } catch (final SMBSignatureValidationException e) {
            throw new SMBProtocolDowngradeException("Signature error during negotiate validation", e);
        } catch (final SmbException e) {
            if (log.isDebugEnabled()) {
                log.debug(String.format("VALIDATE_NEGOTIATE_INFO response code 0x%x", e.getNtStatus()));
            }

        final int start = bufferIndex;

        pathConsumed = readInt2(buffer, bufferIndex);
        bufferIndex += 2;
        /* Samba 2.2.8a will reply with Unicode paths even though
         * ASCII is negotiated so we must use flags2 (probably
         * should anyway).
         */
        if ((flags2 & FLAGS2_UNICODE) != 0) {
            pathConsumed /= 2;
        }
        numReferrals = readInt2(buffer, bufferIndex);