Postfix сбой аутентифкации при SASL CRAM-MD5

log_level: 7
pwcheck_method: auxprop
auxprop_plugin: sasldb
mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5

...
Jan 12 12:53:44 mail postfix/smtpd[3807]: event: SMFIC_HELO; macros: (none)
Jan 12 12:53:44 mail postfix/smtpd[3807]: skipping event SMFIC_HELO for milter inet:localhost:7357
Jan 12 12:53:44 mail postfix/smtpd[3807]: match_hostname: smtpd_sasl_exceptions_networks: oaealex.xxx.ru ~? 192.168.1.0/24
Jan 12 12:53:44 mail postfix/smtpd[3807]: match_hostaddr: smtpd_sasl_exceptions_networks: 192.168.1.228 ~? 192.168.1.0/24
Jan 12 12:53:44 mail postfix/smtpd[3807]: sasl_exceptions: oaealex.prominform.ru[192.168.1.228], match=0
Jan 12 12:53:44 mail postfix/smtpd[3807]: match_list_match: oaealex.xxx.ru: no match
Jan 12 12:53:44 mail postfix/smtpd[3807]: match_list_match: 192.168.1.228: no match
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.xxx.ru[192.168.1.228]: 250-mail.xxx.ru
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-PIPELINING
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-SIZE 30720000
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-ETRN
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-AUTH CRAM-MD5 DIGEST-MD5
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-AUTH=CRAM-MD5 DIGEST-MD5
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-ENHANCEDSTATUSCODES
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-8BITMIME
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250-DSN
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 250 CHUNKING
Jan 12 12:53:44 mail postfix/smtpd[3807]: watchdog_pat: 0x563b6244c800
Jan 12 12:53:44 mail postfix/smtpd[3807]: < oaealex.prominform.ru[192.168.1.228]: AUTH CRAM-MD5
Jan 12 12:53:44 mail postfix/smtpd[3807]: query milter states for other event
Jan 12 12:53:44 mail postfix/smtpd[3807]: milter8_other_event: milter inet:localhost:7357
Jan 12 12:53:44 mail postfix/smtpd[3807]: xsasl_cyrus_server_first: sasl_method CRAM-MD5
Jan 12 12:53:44 mail postfix/smtpd[3807]: xsasl_cyrus_server_auth_response: uncoded server challenge: <3385465035.14584169@mail.prominform.ru>
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.xxx.ru[192.168.1.228]: 334 PDMzODU0NjUwMzUuMTQ1ODQxNjlAbWFpbC5wcm9taW5mb3JtLnJ1Pg==
Jan 12 12:53:44 mail postfix/smtpd[3807]: < oaealex.xxx.ru[192.168.1.228]: dGVzdEBwcm9taW5mb3JtLnJ1IDI3OTIwOTE1NGI3OTg0MjQyOTA1YWRkMzJiZjcyNDQw
Jan 12 12:53:44 mail postfix/smtpd[3807]: xsasl_cyrus_server_next: decoded response: test@xxx.ru 279209154b7984242905add32bf72440
Jan 12 12:53:44 mail postfix/smtpd[3807]: warning: oaealex.xxx.ru[192.168.1.228]: SASL CRAM-MD5 authentication failed: authentication failure
Jan 12 12:53:44 mail postfix/smtpd[3807]: > oaealex.prominform.ru[192.168.1.228]: 535 5.7.8 Error: authentication failed: authentication failure
Jan 12 12:53:44 mail postfix/smtpd[3807]: watchdog_pat: 0x563b6244c800
Jan 12 12:53:44 mail postfix/smtpd[3807]: < oaealex.xxx.ru[192.168.1.228]: MAIL FROM:<test@xxx.ru> SIZE=484
...

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
default_process_limit = 2000
disable_vrfy_command = yes
html_directory = no
inet_interfaces = all
inet_protocols = ipv4
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
message_size_limit = 30720000
mydestination = $mydomain, $myhostname, localhost.$mydomain, localhost
mydomain = xxx.ru
myhostname = mail.prominform.ru
mynetworks = 127.0.0.1/32, 192.168.1.0/24
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix/README_FILES
sample_directory = /usr/share/doc/postfix/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtp_always_send_ehlo = yes
smtpd_client_connection_count_limit = 500
smtpd_error_sleep_time = 0
smtpd_helo_required = yes
smtpd_recipient_limit = 1000
smtpd_reject_unlisted_recipient = yes
smtpd_reject_unlisted_sender = yes
smtpd_sasl_auth_enable = yes
smtpd_sasl_authenticated_header = yes
smtpd_sasl_exceptions_networks = !192.168.1.0/24
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noplaintext, noanonymous
smtpd_sasl_type = cyrus
strict_rfc821_envelopes = yes

smtpd_restriction_classes = local_only, insiders_only
local_only = check_recipient_access hash:/etc/postfix/access_local, reject
insiders_only = check_sender_access hash:/etc/postfix/access_insiders, reject

# Ограничения на этапе установке подключения
smtpd_client_restrictions =
    # Разрешить клиентов, прошедших аутентификацию
    permit_sasl_authenticated,
    check_client_access regexp:/etc/postfix/access_client,
    reject_unauth_pipelining,
    reject_unknown_client_hostname,
    reject_rbl_client b.barracudacentral.org,
    reject_rbl_client bl.spamcop.net,
    reject_rbl_client psbl.surriel.com,
    reject_rbl_client zen.spamhaus.org,
    reject_rbl_client hostkarma.junkemailfilter.com=127.0.0.2,
    reject_rbl_client spamsources.fabel.dk,
    permit

# Ограничения на этапе команды HELO/EHLO
smtpd_helo_restrictions =
    # Разрешить клиентов, прошедших аутентификацию
    permit_sasl_authenticated,
    # Отклонять клиентов, указывающих в HELO не полное доменное имя
    reject_invalid_helo_hostname,
    reject_non_fqdn_helo_hostname,
    reject_unknown_helo_hostname,
    check_helo_access hash:/etc/postfix/access_helo,
    check_helo_access regexp:/etc/postfix/access_client,
    permit

# Ограничения на этапе команды MAIL FROM
smtpd_sender_restrictions =
    # Разрешить клиентов, прошедших аутентификацию
    permit_sasl_authenticated,
    reject_authenticated_sender_login_mismatch,
    # Отклонять почту от отправителей с неполным доменным именем
    reject_non_fqdn_sender,
    # Отклонять почту от отправителей из несуществующего домена
    reject_unknown_sender_domain,
    check_sender_access hash:/etc/postfix/access_sender,
 check_sender_mx_access cidr:/etc/postfix/access_mx,
    reject_unlisted_sender,
    permit

smtpd_relay_restrictions =
    permit_mynetworks,
    # permit_sasl_authenticated,
    reject_unauth_destination

# Ограничения на этапе команды RCPT TO
smtpd_recipient_restrictions =
    # Отклонять почту для получателей с неполным доменным именем
    reject_non_fqdn_recipient,
    # Отклонять почту для получателей в несуществующем домене
    reject_unknown_recipient_domain,
    permit_mynetworks,
    #permit_sasl_authenticated,
    check_recipient_access hash:/etc/postfix/access_recipient,
    check_policy_service unix:/var/spool/postfix/postgrey/socket
    permit

unknown_local_recipient_reject_code = 550
virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps
virtual_transport = lmtp:unix:/var/lib/imap/socket/lmtp

milter_protocol = 6
milter_default_action = tempfail
smtpd_milters = inet:localhost:7357
non_smtpd_milters = inet:localhost:7357