If a short name of a role contains a "-", you receive a "Invalid admin settings (auth_ldap/ROLE-NAMEcontext) error.
Process described in /auth/ldap/upgrade.txt can not handle the "-" into short name of a role

=== 3.4 ===

• The "auth_ldap/coursecreators" setting was replaced with dynamically generated "auth_ldap/<role>context" settings,
  migrating any existing value to a new setting in this style.