diff --git a/source3/winbindd/winbindd_pam.c b/source3/winbindd/winbindd_pam.c
index 41f38a4..c23fa06 100644
--- a/source3/winbindd/winbindd_pam.c
+++ b/source3/winbindd/winbindd_pam.c
@@ -1874,6 +1874,14 @@ process_result:
 
 done:
 
+       if (NT_STATUS_EQUAL(result, NT_STATUS_IO_TIMEOUT)) {
+               DEBUG(3,("winbindd_pam_auth: sam_logon returned "
+                                "TIMEOUT after the retry. We didn't know what's going on "
+                                "Killing connections to domain %s\n",
+                               name_domain));
+               invalidate_cm_connection(&domain->conn);
+       }
+
        /* give us a more useful (more correct?) error code */
        if ((NT_STATUS_EQUAL(result, NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND) ||
            (NT_STATUS_EQUAL(result, NT_STATUS_UNSUCCESSFUL)))) {