So the missing key here was not having "keytab: /etc/postfix/smtp.keytab" in /etc/sasl2/smtpd.conf.
Interesting that this was not required in the previous version of postfix/sasl/kerberos. Cheers, b.
signature.asc
Description: This is a digitally signed message part