Enabling a virtual attribute

You can enable a virtual attribute using the dsconfig tool.

If you are using dsconfig in interactive command-line mode, you can access the virtual attribute menu from the Standard object menu.

Enabling a virtual attribute using `dsconfig` interactive mode

To enable a virtual attribute, use dsconfig.
1. Specify the connection port, bind DN, password, and host information.
2. Enter the LDAP connection parameter for your PingDirectory server:
  - For LDAP, enter 1.
  - For SSL, enter 2.
  - For StartTLS, enter 3.
    
    Example:
    
    bin/dsconfig
On the PingDirectory server main menu, enter o to change the object menu, and then enter the number corresponding to Standard.
On the PingDirectory server main menu, enter the number corresponding to virtual attributes.
On the Virtual Attribute management menu, enter the number to view and edit an existing virtual attribute.
From the list of existing virtual attributes on the system, select the virtual attribute.

For this example, enter the number corresponding to the numSubordinates virtual attribute.
On the numSubordinates Virtual Attribute Properties menu, enter the number to enable the virtual attribute.
On the Enabled Property menu for the numSubordinates virtual attribute, enter the number to change the value to TRUE.
On the numSubordinates Virtual Attribute Properties menu, enter f to apply the changes.
Verify that the virtual attribute is enabled.

Example:

This example assumes you have configured the group entries.
```
$ bin/ldapsearch --baseDN dc=example,dc=com "(ou=People)" numSubordinates
```
Result:

The system returns the following.
```
dn: ou=People,dc=example,dc=com
numSubordinates: 1000
```

To enable a virtual attribute, such as numSubordinates, use dsconfig.

$ bin/dsconfig set-virtual-attribute-prop \
  --name numSubordinates --set enabled:true