I apologize for being so dense about this. Posting this here for future troubleshooting by others.
But after your suggestion, I realized that sogo.users in an IRedmail install isn't a table, its a view of the vmail.mailbox table. And at some point between IRedmail 1.3 and 1.5 it changed, but mine hadn't gotten or picked up that update. (Entirely my fault I'm sure) So I had to add 3 new fields to vmail.mailbox and grab the latest view for sogo.users from a modern iRedmail install. Then, as you said, reset memcache and voila.. everything is working. I knew I did something dumb, but couldn't find what I needed. In this case, the 403 EAS issue was that c_activesync didn't even exist in the sogo.users view. Many thanks! -- users@sogo.nu https://inverse.ca/sogo/lists