We found the problem, it seems that saslauthd has an option -r -r Combine the realm with the login (with an �...@’ sign in between). e.g. login: "foo" realm: "bar" will get passed as login: "f...@bar".
This seems to have been the default with the previous distro -- thorNET Internet Services, Consultancy & Training www.thornet.co.uk