Similar report at Getting Server did not report any SASL mechanisms sometimes
Smack’s BOSH code is old and not actively maintained. If you can’t fix it yourself (patches welcome) have a look at https://github.com/igniterealtime/Smack#professional-services