negotiate protocol taking more than 700mS in recent versions of Samba

[Richard Sharpe]

Hi folks,

While running some FSCT testing we found that NegProt was taking more
than 700mS, most of it in gensec.

It seems that we are generating a keytab with keys for all the enc types.

Our initial solution was to cache the result from the first such call,
however, this needs to be done carefully because of machine account
password changes.

Are there any better approaches?

-- 
Regards,
Richard Sharpe
(何以解憂？唯有杜康。--曹操)