While the LDAP Changelog primarily tracks changes to real attributes, it can also provide information about virtual attributes included in created, updated, or deleted entries. The include-virtual-attributes property controls the virtual attribute information to include in changelog entries, and this property may include any or all of the following values:

add-attributes
Indicates that changelog entries for add operations should include a ds-changelog-virtual-attributes attribute that lists the virtual attribute values generated for the entry at the time it was created.
deleted-entry-attributes
Indicates that changelog entries for delete operations should include a ds-changelog-virtual-attributes attribute that lists the virtual attribute values generated for the entry at the time it was deleted.
before-and-after-values
Indicates that changelog entries for modify and modify DN operations should include ds-changelog-before-virtual-values and ds-changelog-after-virtual-values attributes that contain the values of virtual attributes that have been updated.
key-attribute-values
Indicates that changelog entries should include a ds-changelog-entry-key-virtual-values attribute that holds the values for any virtual attributes included in the set of key attributes, as defined by the changelog-include-key-attribute property.

The add-attributes and before-and-after-values options are selected by default.

  • Use dsconfig to enable virtual attribute change tracking in the LDAP Changelog.

    The following command enables the LDAP changelog and sets include-virtual-attributes to add-attributes, which indicates that virtual attribute be included in the set of attributes listed for an add operation. The delete-entry-attributes option indicates that virtual attributes should be included in the set of deleted entry attributes listed for a delete operation. The before-and-after-values option indicates that virtual attributes should be included in the set of before and after values for attributes targeted by the changes. The key-attribute-values option indicates that virtual attributes should be included in the set of entry key attribute values.

    $ bin/dsconfig set-backend-prop --backend-name "changelog" \
      --set "enabled:true" \
      --set "include-virtual-attributes:add-attributes" \
      --set "include-virtual-attributes:deleted-entry-attributes" \
      --set "include-virtual-attributes: before-and-after-values" \
      --set "include-virtual-attributes: key-attribute-values"