response = sessResponse;
                }

                if (!this.getConfig().isAllowGuestFallback() && response.isLoggedInAsGuest()
                        && (!this.credentials.isGuest() && !this.credentials.isAnonymous())) {
                    throw new SmbAuthException(NtStatus.NT_STATUS_LOGON_FAILURE);
                }
                if (!this.credentials.isAnonymous() && response.isLoggedInAsGuest()) {

            // MID checking not required here as we only read responses for which we're waiting
            // We only read what we were waiting for, so first guess would be no.
            final boolean verify = dgst.verify(buffer, i, size, 0, this);
            this.verifyFailed = verify;
            return !verify;
        }
        return true;
    }

### Timing Attacks { #timing-attacks }

But what's a "timing attack"?

Let's imagine some attackers are trying to guess the username and password.

And they send a request with a username `johndoe` and a password `love123`.

Then the Python code in your application would be equivalent to something like:

```Python

        assertFalse(config.isDisableSpnegoIntegrity());
        assertTrue(config.isEnforceSpnegoIntegrity());
        assertTrue(config.isSendNTLMTargetName());
        assertEquals("GUEST", config.getGuestUsername());
        assertEquals("", config.getGuestPassword());
        assertFalse(config.isAllowGuestFallback());
    }

    @Test
    @DisplayName("Test NetBIOS configuration getters")

    }

    // Mock classes

    static class MockFessConfig extends FessConfig.SimpleImpl {
        @Override
        public String[] getSearchDefaultPermissionsAsArray() {
            return new String[] { "guest", "default" };
        }

        @Override
        public List<String> getSearchGuestRoleList() {
            List<String> roles = new ArrayList<>();
            roles.add("guest_role1");

	"net/url"
	"strconv"
	"strings"
	"testing"

	"github.com/minio/minio/internal/crypto"
	"github.com/minio/minio/internal/grid"
	xhttp "github.com/minio/minio/internal/http"
)

// Tests request guess function for net/rpc requests.
func TestGuessIsRPC(t *testing.T) {
	if guessIsRPCReq(nil) {
		t.Fatal("Unexpected return for nil request")
	}

	u, err := url.Parse("http://localhost:9000/minio/lock")
	if err != nil {

                                "shared;/share/shared;no;no;no;all;" + USERNAME + ";all;all", "-g", "log level = 1", "-g",
                                "security = user", "-g", "map to guest = bad user")
                        .withLogConsumer(new Slf4jLogConsumer(LoggerFactory.getLogger(SmbFileIntegrationTest.class)))

                                                     property="doc.role" styleClass="form-control"
                                                     data-validation-help="1(username) | 2(groupname) | R(rolename)  e.g. Rguest"/>
                                    </div>
                                </div>
                                <div class="form-group row">

										class="fa fa-exclamation-triangle text-warning"
									></a></li>
							</c:if>
							<c:choose>
								<c:when test="${!empty username && username != 'guest'}">
									<li class="nav-item">
										<div class="dropdown">
											<a id="userMenu" class="nav-link dropdown-toggle" data-bs-toggle="dropdown"

            } else {

                /* On NT without Unicode the fileNameLength
                 * includes the '\0' whereas on win98 it doesn't. I
                 * guess most clients only support non-unicode so
                 * they don't run into this.
                 */

                /* UPDATE: Maybe not! Could this be a Unicode alignment issue. I hope