bufferIndex += 2;
        final int ownerUOffset = ServerMessageBlock.readInt4(buffer, bufferIndex); // offset to owner sid
        bufferIndex += 4;
        final int ownerGOffset = ServerMessageBlock.readInt4(buffer, bufferIndex); // offset to group sid
        bufferIndex += 4;
        final int saclOffset = ServerMessageBlock.readInt4(buffer, bufferIndex); // offset to sacl
        bufferIndex += 4;

     * @return the access mask for this ACE
     */
    public int getAccessMask() {
        return access;
    }

    /**
     * Return the SID associated with this ACE.
     * @return the SID for this ACE
     */
    public SID getSID() {
        return sid;
    }

    int decode(final byte[] buf, int bi) {
        allow = buf[bi] == (byte) 0x00;
        bi++;
        flags = buf[bi++] & 0xFF;

import jcifs.smb1.util.Hexdump;

class Trans2FindNext2 extends SmbComTransaction {

    private final int sid, informationLevel;
    private int resumeKey;
    private final int flags;
    private String filename;

    Trans2FindNext2(final int sid, final int resumeKey, final String filename) {
        this.sid = sid;
        this.resumeKey = resumeKey;
        this.filename = filename;
        command = SMB_COM_TRANSACTION2;

        int result = response.readParametersWireFormat(buffer, 0, 8);

        // Should read 8 bytes (no sid for FIND_NEXT)
        assertEquals(8, result);
        assertEquals(3, response.getNumEntries());
        assertFalse(response.isEndOfSearch());
        assertEquals(0, response.getSid()); // sid should remain 0
    }

        assertEquals(10, bytesRead);
        assertEquals(1, response.sid);
        assertEquals(2, response.numEntries);
        assertTrue(response.isEndOfSearch);
        assertEquals(3, response.eaErrorOffset);
        assertEquals(4, response.lastNameOffset);
    }

    @Test
    void testReadParametersWireFormat_FindNext2() {
        // In FindNext2, sid is not read

    @DisplayName("Constructor should handle various FID values")
    void testConstructorWithVariousFids(int fid) {
        // Act
        transPeekNamedPipe = new TransPeekNamedPipe(mockConfig, TEST_PIPE_NAME, fid);

        // Assert
        assertNotNull(transPeekNamedPipe);
        // FID is written in writeSetupWireFormat, verify it there
    }

    @Test

 * "The .NET Developer's Guide to Windows Security" (which is also
 * available online).
 * <p>
 * Direct ACEs are evaluated first in order. The SID of the user performing
 * the operation and the desired access bits are compared to the SID
 * and access mask of each ACE. If the SID matches, the allow/deny flags
 * and access mask are considered. If the ACE is a "deny"
 * ACE and <i>any</i> of the desired access bits match bits in the access

 */

package jcifs.smb1.dcerpc.msrpc;

import jcifs.smb1.smb1.SID;

/**
 * MSRPC implementation for looking up security identifiers (SIDs).
 * This class provides functionality to resolve SIDs to their corresponding
 * account names using the LSA RPC interface.
 */
public class MsrpcLookupSids extends lsarpc.LsarLookupSids {

    SID[] sids;

    /**
     * Creates a new request to lookup SIDs.
     *

        SmbComLockingAndX cmd = new SmbComLockingAndX(cfg);
        setField(cmd, "fid", 42);
        setField(cmd, "typeOfLock", (byte) 0x07);
        setField(cmd, "newOpLockLevel", (byte) 0x02);
        String repr = cmd.toString();
        assertTrue(repr.contains("fid=42"));
        assertTrue(repr.contains("typeOfLock=7"));
        assertTrue(repr.contains("newOplockLevel=2"));
    }

        byte[] data = new byte[] { 0x78, 0x56, 0x34, 0x12 };
        PacDataInputStream pdis = createInputStream(data);
        SID sid = pdis.readId();
        // The readId method creates a SID with authority 5 and the RID value
        // Expected format: S-1-5-305419896
        String sidString = sid.toString();
        assertNotNull(sidString);
        assertEquals("S-1-5-305419896", sidString);
    }

    @Test