I think you can leave the pam config for what it is. In Outlook express be sure to set the following in the account options windows:
do NOT select 'Log on using Secure Password Authentication'
set 'this server requires a secure connection (SSL)'
This config works for me...