void createContext_forceFallback_triggersNtlmAndFailsOnNonNtlmToken() throws CIFSException {
        when(tc.getConfig()).thenReturn(config);
        when(config.isAllowNTLMFallback()).thenReturn(true);
        when(config.isUseRawNTLM()).thenReturn(false);

        // Enable NTLM fallback by providing NTLM creds in constructor
        Kerb5Authenticator auth = new Kerb5Authenticator(new Subject(), "DOM", "user", "pass");
        auth.setForceFallback(true);

            mockConfig.getDefaultUsername();
            mockConfig.getDefaultPassword();
            mockConfig.getLanManCompatibility();
            mockConfig.isAllowNTLMFallback();
            mockConfig.isUseRawNTLM();
            mockConfig.isDisablePlainTextPasswords();
            mockConfig.getResolveOrder();
            mockConfig.getBroadcastAddress();
            mockConfig.getWinsServers();

        return this.delegate.isAllowNTLMFallback();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isUseRawNTLM()
     */
    @Override
    public boolean isUseRawNTLM() {
        return this.delegate.isUseRawNTLM();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isDisableSpnegoIntegrity()
     */
    @Override

        // Given
        when(mockDelegate.getLanManCompatibility()).thenReturn(3);
        when(mockDelegate.isAllowNTLMFallback()).thenReturn(true);
        when(mockDelegate.isUseRawNTLM()).thenReturn(false);
        when(mockDelegate.isDisablePlainTextPasswords()).thenReturn(true);
        when(mockDelegate.getGuestUsername()).thenReturn("GUEST");
        when(mockDelegate.getGuestPassword()).thenReturn("");

        assertTrue(config.isDisablePlainTextPasswords());
        assertEquals(3, config.getLanManCompatibility());
        assertTrue(config.isAllowNTLMFallback());
        assertFalse(config.isUseRawNTLM());
        assertFalse(config.isDisableSpnegoIntegrity());
        assertTrue(config.isEnforceSpnegoIntegrity());
        assertTrue(config.isSendNTLMTargetName());

        }

        // Log authentication attempt
        auditLogger.logAuthentication(false, this.username, this.domain, host);

        if (tc.getConfig().isUseRawNTLM()) {
            return setupTargetName(tc, host, new NtlmContext(tc, this, doSigning));
        }

        try {
            if (initialToken != null && initialToken.length > 0) {

    /**
     * Property {@code jcifs.smb.useRawNTLM} (boolean, default false)
     *
     * @return whether to use raw NTLMSSP tokens instead of SPNEGO wrapped ones
     * @since 2.1
     */
    boolean isUseRawNTLM();

    /**
     *
     * Property {@code jcifs.smb.client.disablePlainTextPasswords} (boolean, default true)
     *
     * @return whether the usage of plaintext passwords is prohibited, defaults to false

        return this.lanmanCompatibility;
    }

    @Override
    public boolean isAllowNTLMFallback() {
        return this.allowNTLMFallback;
    }

    @Override
    public boolean isUseRawNTLM() {
        return this.useRawNTLM;
    }

    @Override
    public boolean isDisableSpnegoIntegrity() {
        return this.disableSpnegoIntegrity;
    }

    @Override