One thing I remember from olden days is you need to make sure that your distribution compiled in all the right support; can you double-check that your daemon has sasl and krb support compiled in?