> I am pretty sure this has worked for several years but now it is broken:
Has mac-owner's key been expired in your auth keyfs? >Are you all happy to sprinkle bootes key onto unix machines (hard to believe)? negative: the credentials you put in /etc/u9fs.key represent the service, not a client. A client may be any valid user registered in the AS. U9fs uses its key to decrypt tickets issued by the AS to clients.