Ejabberd, не получается авторизоваться извне

override_global.
override_local.
override_acls.

{loglevel, 4}.
{hosts, ["gw.urfu-nsk", "5.x.x.8"]}.
{s2s_default_policy, deny}.

{listen,
 [
  {5222, ejabberd_c2s, [
                        {access, c2s},
                        {shaper, c2s_shaper},
                        {max_stanza_size, 65536},
                        {certfile, "/etc/ejabberd/ejabberd.pem"},
                        starttls
                       ]},
%  {5269, ejabberd_s2s_in, [
%                          {shaper, s2s_shaper},
%                          {max_stanza_size, 131072}
%                         ]},
  {5280, ejabberd_http, [
                         %%{request_handlers,
                         %% [
                         %%  {["pub", "archive"], mod_http_fileserver}
                         %% ]},
                         captcha,
                         http_bind,
                         http_poll,
                         %%register,
                         web_admin
                        ]}
 ]}.

%{s2s_use_starttls, true}.
%{s2s_certfile, "/etc/ejabberd/server.pem"}.

{auth_method, internal}.
{shaper, normal, {maxrate, 1000}}.
{shaper, fast, {maxrate, 50000}}.
{max_fsm_queue, 1000}.

{acl, admin, {user, "gard", "gw.urfu-nsk"}}.
{acl, local, {user_regexp, ""}}.

{access, max_user_sessions, [{10, all}]}.                             
{access, max_user_offline_messages, [{5000, admin}, {100, all}]}.     
{access, local, [{allow, local}]}.                                   
{access, c2s, [{deny, blocked}, {allow, all}]}.                    
{access, c2s_shaper, [{none, admin}, {normal, all}]}.
%{access, s2s_shaper, [{fast, all}]}.                                   
{access, announce, [{allow, admin}]}.                                   
{access, configure, [{allow, admin}]}.                                 
{access, muc_admin, [{allow, admin}]}.                                 
{access, muc_create, [{allow, local}]}.                                
{access, muc, [{allow, all}]}.                                        
{access, pubsub_createnode, [{allow, local}]}.                       
{access, register, [{deny, all}]}.                                  


{language, "ru"}.

{modules,
 [
  {mod_adhoc,    []},
  {mod_announce, [{access, announce}]},
  {mod_caps,     []},
  {mod_configure,[]}, %требует mod_adhoc
  {mod_disco,    []},
  %{mod_http_bind, []},
  {mod_last,     []},
  %{mod_muc,      [
  %               {host, "rooms.smb.urfu-nsk"},
  %               {access, muc},
  %               {access_create, muc_create},
  %               {access_persistent, muc_create},
  %               {access_admin, muc_admin}
  %              ]},
  {mod_offline,  [{access_max_user_messages, max_user_offline_messages}]},
  {mod_ping,     []},
  {mod_privacy,  []},
  {mod_private,  []},
  %{mod_register, [
  %               {welcome_message, {"Здравствуйте!","Добро пожаловать на наш jabber-сервер."}},
  %               {registration_watchers, ["gard@smb.urfu-nsk"]},
  %               {ip_access, [{allow, "192.168.2.0/24"}, {deny, "0.0.0.0/0"}]},
  %               {access, register}
  %              ]},
  {mod_roster,   []},
  {mod_shared_roster,[]},
  {mod_stats,    []},
  {mod_time,     []},
  {mod_vcard,    []},
  {mod_version,  []}
]}.

=INFO REPORT==== 2016-05-11 10:49:49 ===
I(<0.386.0>:ejabberd_listener:281) : (#Port<0.2123>) Accepted connection {{5,199,193,231},62144} -> {{5,x,x,8},5222}

=INFO REPORT==== 2016-05-11 10:49:51 ===
I(<0.1037.0>:ejabberd_c2s:802) : ({socket_state,tls,{tlssock,#Port<0.2123>,#Port<0.2125>},<0.1036.0>}) Failed authentication for gard@5.x.x.8

=INFO REPORT==== 2016-05-11 10:49:52 ===
I(<0.1037.0>:ejabberd_c2s:649) : ({socket_state,tls,{tlssock,#Port<0.2123>,#Port<0.2125>},<0.1036.0>}) Failed authentication for gard@5.x.x.8