saslauthd + postfix

[specialgreen]

I'd like to use saslauthd with postfix, to provide password-protected SMTP relay service. I don't care if authentication is proxying to imapd, or system password, or a new user database. However, I'm having trouble finding any working "authmech" on the system-supplied saslauthd.

I'm using Snow Leopard 10.8.0 with Xcode 3.2.6, postfix 2.5.14 and saslauthd 2.1.2 (all built-in).

Using "/usr/sbin/saslauthd -a getpwent", I can attempt an auth against a test account:

auth plain dGVzdHVzZXIAdGVzdHVzZXIAdGVzdHBhc3M=
535 5.7.8 Error: authentication failed: generic failure

/var/log/mail.log shows that postfix is decoding my MIME64 OK, but failing auth check:

< localhost[127.0.0.1]: auth plain dGVzdHVzZXIAdGVzdHVzZXIAdGVzdHBhc3M=
xsasl_cyrus_server_first: sasl_method plain, init_response dGVzdHVzZXIAdGVzdHVzZXIAdGVzdHBhc3M=
xsasl_cyrus_server_first: decoded initial response testuser
warning: SASL authentication failure: could not verify password
warning: SASL authentication failure: Password verification failed
warning: localhost[127.0.0.1]: SASL plain authentication failed: generic failure
> localhost[127.0.0.1]: 535 5.7.8 Error: authentication failed: generic failure
watchdog_pat: 0x100132210

debug output from "saslauthd -a getpwent -d -n 1" shows that there is a socket connection from postfix:

saslauthd[66014] :rel_accept_lock : released accept lock
saslauthd[66014] :do_request : login exceeded MAX_REQ_LEN: 256
saslauthd[66014] :get_accept_lock : acquired accept lock

...but there doesn't seem to be much auth going on there.

I also tried "-a rimap -O 222.222.222.222" as a test, but saslauthd is not opening a TCP socket to 222.222.222.222 (so again: not doing anything much).