>From the kerberos list discussion, the platform this behavior was observed on was Solaris 10 / x86. The obvious possibility is that the resolver is returning -1 when the response is too big for the buffer, instead of the size of the response as we expect.