> essentially need to remote the entire authentication exchange.
Sure, this will require state in the winbind client struct.
outstanding authentication exchange on a winbind connection.
If the connection is cut, just fail the whole conversation.
stateless, but that's the price we have to pay I think.