If the Dialup-Access attribute is specified, the ldap module checks for its existance in user object. If it exists and is set to FALSE, user is denied remote access. Otherwise, the user is allowed remote access.