Why doesn't Postfix announce AUTH during EHLO?
smtpd_tls_auth_only = yes
Needed to change this to
smtpd_tls_auth_only = no
Is the out put of postconf smtpd_tls_auth_only smtpd_tls_auth_only = yes?
If so, need to use starttls before authenticating.
Could disable setting to allow for unencrypted authentication (not advised).
Can debug with starttls using:openssl s_client -connect $YOUR_SMTP_SERVER:25 -starttls smtp -CApath $PATH_TO_CA_DIR
This is kind of stretch, but have you verified that it's listening on TCP 25 with lsof?