While the LDAP Changelog primarily tracks changes to real attributes, it can also provide information about virtual attributes included in created, updated, or deleted entries.
The include-virtual-attributes
property controls the virtual attribute
information to include in changelog entries, and this property might include any or all
of the following values:
add-attributes
- Indicates that changelog entries for
add
operations should include ads-changelog-virtual-attributes
attribute that lists the virtual attribute values generated for the entry at the time it was created. deleted-entry-attributes
- Indicates that changelog entries for
delete
operations should include ads-changelog-virtual-attributes
attribute that lists the virtual attribute values generated for the entry at the time it was deleted. before-and-after-values
- Indicates that changelog entries for
modify
andmodify DN
operations should includeds-changelog-before-virtual-values
andds-changelog-after-virtual-values
attributes that contain the values of virtual attributes that have been updated. key-attribute-values
- Indicates that changelog entries should include a
ds-changelog-entry-key-virtual-values
attribute that holds the values for any virtual attributes included in the set of key attributes, as defined by thechangelog-include-key-attribute
property.
The add-attributes
and before-and-after-values
values
are selected by default.
To enable virtual attribute change tracking in the LDAP Changelog:
The following command enables the LDAP changelog and sets
include-virtual-attributes
to
add-attributes
, which indicates that virtual attributes be
included in the set of attributes listed for an add operation. The
delete-entry-attributes
value indicates that virtual
attributes should be included in the set of deleted entry attributes listed for
a delete operation. The before-and-after-values
value
indicates that virtual attributes should be included in the set of before and
after values for attributes targeted by the changes. The
key-attribute-values
value indicates that virtual
attributes should be included in the set of entry key attribute values.
$ bin/dsconfig set-backend-prop --backend-name "changelog" \
--set "enabled:true" \
--set "include-virtual-attributes:add-attributes" \
--set "include-virtual-attributes:deleted-entry-attributes" \
--set "include-virtual-attributes: before-and-after-values" \
--set "include-virtual-attributes: key-attribute-values"