correct use of ldap setting enabled true/false