To allow passwords like {SASL}zach@ZNET for SASL pass-through, the correct permissions are needed.

chown :ldap /var/run/saslauthd