Since nobody replied to this message, I will.
/etc/sasldb2 is owned by root:sasl.
If you change it to cyrus:sasl, it will work.
Heri