EAP-TLS and LDAP with Windows Server 2012R2 Native Functional Level

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> However, whereas in most places in FreeRADIUS the & is optional,
> here it's not. If you miss it, it silently fails; perhaps it is
> looking on the "real" AV list instead.

going forward, its mandatory. 

if you run 3.x versions with extra debug - eg radiusd -fxxx -lstdout 
(note, 3 x's, not one or 2) you will see the yellow WARNING messages for
each incantation where & should be present.

alan