anchor.diff:  		#  'no' and the access_attribute is present, then
   		#  access will not be allowed.
   		#
  -		#  If the value of the access_attribute is 'false', it
  -		#  will negate the result.
  +		#  If the value of the retrieved access_attribute is
  +		#  'false', it will negate the result.
   		#
   		#  e.g.
   		#    access_positive = yes
  
positive.code: 	#  unlang constructs in module configuration files.
  	#
  	#  Configuration items are in the format:
  	# 	<radius attr> <op> <ldap attr>
  	#
  	#  Where:
  	#  	<radius attr>:	Is the destination RADIUS attribute
  	# 			with any valid list and request qualifiers.
  	#  	<op>: 		Is any assignment attribute (=, :=, +=, -=).
  	#  	<ldap attr>:	Is the attribute associated with user or
  
negative.code: 		start_tls = <%= @starttls %>
  
  <% if @cafile != '' -%>
  		ca_file = <%= @cafile %>
  <% end -%>
  #               ca_path = ${certdir}
  <% if @certfile != '' -%>
  		certificate_file = <%= @certfile %>
  <% end -%>
  