If the Dialup-Access attribute is specified, the ldap module
  checks for its existance in user object. If it exists and is
  set to FALSE, user is denied remote access. Otherwise, the user
  is allowed remote access.