The id_token received is a signed JSON Web Token (JWT). Use a JWT decoder to decode the id_token to access the payload of the token that includes following JWT claims, `policy` claim is mandatory and should be present as part of your JWT claim. Without this claim the generated credentials will not have access to any resources on the server, using these credentials application would receive 'Access Denied' errors.

<p>
The second parameter specifies how the file should be shared. If
<code>SmbFile.FILE_NO_SHARE</code> is specified the client will
have exclusive access to the file. An additional open command
from jCIFS or another application will fail with the "file is being
accessed by another process" error. The <code>FILE_SHARE_READ</code>,
<code>FILE_SHARE_WRITE</code>, and <code>FILE_SHARE_DELETE</code> may be

 */

package jcifs.dcerpc.msrpc;


@SuppressWarnings ( "javadoc" )
public class MsrpcSamrConnect4 extends samr.SamrConnect4 {

    public MsrpcSamrConnect4 ( String server, int access, SamrPolicyHandle policyHandle ) {
        super(server, 2, access, policyHandle);
        this.ptype = 0;
        this.flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

 */

package jcifs.smb1.dcerpc.msrpc;

public class MsrpcSamrConnect2 extends samr.SamrConnect2 {

    public MsrpcSamrConnect2(String server, int access, SamrPolicyHandle policyHandle) {
        super(server, access, policyHandle);
        ptype = 0;
        flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

 */

package jcifs.dcerpc.msrpc;


@SuppressWarnings ( "javadoc" )
public class MsrpcSamrConnect2 extends samr.SamrConnect2 {

    public MsrpcSamrConnect2 ( String server, int access, SamrPolicyHandle policyHandle ) {
        super(server, access, policyHandle);
        this.ptype = 0;
        this.flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

 */

package jcifs.smb1.dcerpc.msrpc;

public class MsrpcSamrConnect4 extends samr.SamrConnect4 {

    public MsrpcSamrConnect4(String server, int access, SamrPolicyHandle policyHandle) {
        super(server, 2, access, policyHandle);
        ptype = 0;
        flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }

        this.password = password;
    }

    /**
     * Get the username used to access the repository.
     *
     * @return username at repository
     */
    public String getUsername() {
        return username;
    }

    /**
     * Set username used to access the repository.
     *
     * @param userName the username used to access repository
     */
    public void setUsername(final String userName) {

		defer updateOSMetrics(osMetricOpenFileR, name)(err)
	}
	return os.OpenFile(name, flag, perm)
}

// Access captures time taken to call syscall.Access()
// on windows, plan9 and solaris syscall.Access uses
// os.Lstat()
func Access(name string) (err error) {
	defer updateOSMetrics(osMetricAccess, name)(err)
	return access(name)
}

// Open captures time taken to call os.Open
func Open(name string) (f *os.File, err error) {

                int flags = SmbConstants.O_CREAT;
                int sharing = SmbConstants.FILE_SHARE_DELETE | SmbConstants.FILE_SHARE_READ | SmbConstants.FILE_SHARE_WRITE;
                int access = SmbConstants.FILE_READ_DATA | SmbConstants.FILE_READ_ATTRIBUTES | SmbConstants.FILE_WRITE_ATTRIBUTES
                        | SmbConstants.FILE_WRITE_DATA;
                int attrs = 0;
                int options = 0;

import jcifs.smb1.dcerpc.*;

public class MsrpcSamrOpenAlias extends samr.SamrOpenAlias {

    public MsrpcSamrOpenAlias(SamrDomainHandle handle,
                    int access,
                    int rid,
                    SamrAliasHandle aliasHandle) {
        super(handle, access, rid, aliasHandle);
        ptype = 0;
        flags = DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG;
    }