Paul, letting us know that it works against a lenny server but not a sid server is very interesting. That probably means that the etype negotiation support introduced in 1.7 is not quite doing the right thing.
Things to check: [I'm not saying you should check these; this is mostly for Kerberos people including myself to look at. In particular I may not be giving enough detail here for someone not familiar with Kerberos and NFS internals. It will be a few days before I can go through this myself] * Confirm that both the lenny and sid kernels only support DES. * If sid kernel supports more than DES, it may be a config issue on the server side. * Confirm that the client is setting the allowed gss enctypes * walk through that code path and see what breaks. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org