Working with virtual attributes

The PingDirectoryProxy server provides dynamically generated attributes called virtual attributes for local PingDirectoryProxy server data.

The proxy virtual attributes apply to a local proxy backend, such as cn=config or the Root DSA-specific entry (DSE).

If you want virtual attributes in entries for proxied requests, they must be configured in the backend servers. Alternately, attributes can be inserted into those entries using proxy transformations. For more information, see Configuring proxy transformations.

For example, you can define a virtual attribute and assign it to the Root DSE using create-virtual-sttribute.

$ bin/dsconfig create-virtual-attribute \
  --name defineDescriptionOnRootDSE --type user-defined \
  --set enabled:true --set attribute-type:description \
  --set filter:objectclass=ds-root-dse --set value:PrimaryProxy

If you search the Root DSE using the following LDAP search, you see that the description attribute now has the value PrimaryProxy.

$ bin/ldapsearch --baseDN "" --searchScope base --bindDN "" \
  --bindPassword "" --port 5389 -- hostname localhost \
  "objectclass=*" description

dn:
description:PrimaryProxy