void createContext_forceFallback_triggersNtlmAndFailsOnNonNtlmToken() throws CIFSException {
        when(tc.getConfig()).thenReturn(config);
        when(config.isAllowNTLMFallback()).thenReturn(true);
        when(config.isUseRawNTLM()).thenReturn(false);

        // Enable NTLM fallback by providing NTLM creds in constructor

            mockConfig.getDefaultDomain();
            mockConfig.getDefaultUsername();
            mockConfig.getDefaultPassword();
            mockConfig.getLanManCompatibility();
            mockConfig.isAllowNTLMFallback();
            mockConfig.isUseRawNTLM();
            mockConfig.isDisablePlainTextPasswords();
            mockConfig.getResolveOrder();
            mockConfig.getBroadcastAddress();

        return this.delegate.getLanManCompatibility();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isAllowNTLMFallback()
     */
    @Override
    public boolean isAllowNTLMFallback() {
        return this.delegate.isAllowNTLMFallback();
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.Configuration#isUseRawNTLM()
     */
    @Override

    void testAuthenticationConfigurationDelegation() {
        // Given
        when(mockDelegate.getLanManCompatibility()).thenReturn(3);
        when(mockDelegate.isAllowNTLMFallback()).thenReturn(true);
        when(mockDelegate.isUseRawNTLM()).thenReturn(false);
        when(mockDelegate.isDisablePlainTextPasswords()).thenReturn(true);
        when(mockDelegate.getGuestUsername()).thenReturn("GUEST");

        assertNull(config.getDefaultPassword());
        assertTrue(config.isDisablePlainTextPasswords());
        assertEquals(3, config.getLanManCompatibility());
        assertTrue(config.isAllowNTLMFallback());
        assertFalse(config.isUseRawNTLM());
        assertFalse(config.isDisableSpnegoIntegrity());
        assertTrue(config.isEnforceSpnegoIntegrity());
        assertTrue(config.isSendNTLMTargetName());

                    foundKerberos |= mechs.contains(mech);
                }
                if ((!foundKerberos || this.forceFallback) && this.canFallback && tc.getConfig().isAllowNTLMFallback()) {
                    log.debug("Falling back to NTLM authentication");
                    return super.createContext(tc, targetDomain, host, initialToken, doSigning);
                }

    /**
     *
     * Property {@code jcifs.smb.allowNTLMFallback} (boolean, default true)
     *
     * @return whether to allow fallback from kerberos to NTLM
     */
    boolean isAllowNTLMFallback();

    /**
     * Property {@code jcifs.smb.useRawNTLM} (boolean, default false)
     *
     * @return whether to use raw NTLMSSP tokens instead of SPNEGO wrapped ones
     * @since 2.1
     */

        return this.disablePlainTextPasswords;
    }

    @Override
    public int getLanManCompatibility() {
        return this.lanmanCompatibility;
    }

    @Override
    public boolean isAllowNTLMFallback() {
        return this.allowNTLMFallback;
    }

    @Override
    public boolean isUseRawNTLM() {
        return this.useRawNTLM;
    }

    @Override