close 657802 Thanks Conclusion for the record: For kerberized NFSv4 on squeeze 6.0.4 you need: [libdefaults] permitted_enctypes = des-cbc-crc allow_weak_crypto = true in /etc/krb5.conf Both won't be needed for wheezy anymore as kernel/nfs-utils/whatever can then handle strong encryption. Thanks Andi