Postfix SMTP AUTH on Port 587 Issue

[KCSB]

So I really, REALLY tried avoiding posting this, as I'm certain I am missing something simple. But, at this point, having another set of eyes might be useful.

And I'm pretty much following the main Gentoo/Postfix/virtual setup guide (without the virtual hosting and MYSQL backend).

I'm trying to set up a very simple local delivery postfix/courier-imap system (one domain, a small amount of users, nothing overly complicated). I've got everything working EXCEPT the authenticated SMTP - which I'd really like to have ONLY available on Port 587. For some reason, I just can't get it to work - and I'm pretty stumped as to why. I've also regenerated the certs a few times, but the CN matches the server name, so I'm nearly certain that is not it.

I should note that I'm setting this all up on a testbed machine with the hopes of migrating over from our current Sendmail based system (there's a good reason for this migration - it's more than you want to know). And I'm under a bit of a deadline to get this done by Thursday, so any help would be GREATLY appreciated. I really feel like it's close, but there's got to be something I'm just not seeing.

My master.cf:

[audiodef]

Oh, it's always something simple, although I'm not the one to spot it.

It sounds like the mail guide linked in my sig below might be perfect for you. Cachrr0 wrote it, using me as the document tester, so it's been pored over a few times. Check out it, and if you follow it and still have trouble, post to this thread.

Hope this helps.
_________________
decibel Linux: https://decibellinux.org
Github: https://github.com/Gentoo-Music-and-Audio-Technology
Facebook: https://www.facebook.com/decibellinux
Discord: https://discord.gg/73XV24dNPN

[KCSB]

I think your guide is great - and if I had more time, I would ABSOLUTELY go that route.

But I think, given that we already authenticate using PAM (for all of its flaws), it'll be easier (in theory at this point), to migrate accounts and passwords without having to use a MySQL backend given the time frame. If I can get this going, I can pretty much keep us down for a minimal amount of time while I copy email to the new box.

And since everything is pretty much working save for the SMTP authentication, I'd have to pretty much go back and start from the near-beginning.

[fillerbunny]

Is the reason you are not seeing 250-AUTH LOGIN PLAIN during telnet because you have