It would probably be enlightening to watch the actual network negotiations with something like tcpick

I know the last time I messed with smtp_auth, the "real" errors were not making it thru to the perl script. But once I saw where the auth_server was stopping, it was easier to fix.