I've probably found the issue. It seems /etc/exports syntax gss/krb5 is not only deprecated as stated in man page, but doesn't work at all. After changing to sec=krb5, kerberized NFS4 exports started to work again. -- Michal Kašpar