I have Freeradius authenticating to an Active Directory system via ntlm_auth. When a username in the format "foobar\jdoe" comes in, where "foobar" is the domain and "jdoe" is the real username, the authentication succeeds just fine. But if username is "foobar\tdoe" then it gets expanded to "foobar doe". Here's some real output where the passed in username was "CCSU\tstudent": ``` (0) mschap : Client is using MS-CHAPv1 with NT-Password (0) mschap : Executing: "/bin/ntlm_auth --request-nt-key --username=%{%{mschap:User-Name}:-None} --domain=%{%{mschap:NT-Domain}:-None} --challenge=%{%{mschap:Challenge}:-00} --nt-response=%{%{mschap:NT-Response}:-00}" (0) mschap : expand: "--username=%{%{mschap:User-Name}:-None}" -> '--username=CCSU student' (0) mschap : No NT-Domain was found in the User-Name. (0) mschap : expand: "--domain=%{%{mschap:NT-Domain}:-None}" -> '--domain=' (0) mschap : mschap1: ac (0) mschap : expand: "--challenge=%{%{mschap:Challenge}:-00}" -> '--challenge=ac132ce03cba1933' (0) mschap : expand: "--nt-response=%{%{mschap:NT-Response}:-00}" -> '--nt-response=ff768eafb00738e62a3a92e103bf5c7baa7d926da2248b88' (0) mschap : Program returned code (1): Logon failure (0xc000006d) (0) mschap : External script failed. (0) ERROR: mschap : External script says: Logon failure (0xc000006d) ``` How do I prevent the escape sequence from being expanded?