negotiate protocol taking more than 700mS in recent versions of Samba

Richard Sharpe realrichardsharpe at
Mon May 2 15:40:04 UTC 2016

Hi folks,

While running some FSCT testing we found that NegProt was taking more
than 700mS, most of it in gensec.

It seems that we are generating a keytab with keys for all the enc types.

Our initial solution was to cache the result from the first such call,
however, this needs to be done carefully because of machine account
password changes.

Are there any better approaches?

Richard Sharpe

More information about the samba-technical mailing list