hello
it seems that openfire doesnt support in band register over anonymous sasl (code check if a session is ready and if yes it assume you are changing the passord -> with throw usernotfound execption that reject the IQ qith bad_syntax,
what says standard on this? shall we allow in band register over anonymous session? if yes a quick fix would be if (session ready && !session.anonymous) { modify ... }