That KB does not help: it merely demonstrates how to set up Kerberized NFS with
the old "ArcFour with HMAC/md5" encryption type. We have used this for many years from Linux.
However, "ArcFour with HMAC/md5" was never supported by Apple.
Since Apple disabled Single-DES in OS X Yosemite, the only Kerberos encryption types
compatible with both Active Directory and macOS Sierra have been 128-bit AES and 256-bit AES.
AES is what we have not managed to get to work under 7-mode.