My bad. Turns out that the caching introduced to avoid memory leaks introduces a situation where a free()d pointer may hang around in the caller of krb__get_srvtabname(). We *heart* Purify. For some reason, alpha/tru64 was the most sensitive to this sort of things, possibly due to its malloc() implementation. Working on a fix.