users created from ldap should be enabled