Overview#
The real attributes only control is a SupportedControl that may be used to request that the server only include real attributes in matching entries. That is, Virtual Attribute will be excluded from search result entries.
The real attributes only control has a request OID of "2.16.840.1.113730.3.4.17" and no value.
In the following search, the numsubordinates virtual attribute is requested and returned:
$ ldapsearch -D "cn=directory manager" -w password -b "ou=people,dc=example,dc=com" -s base "objectclass=*" numsubordinates version: 1 dn: ou=People,dc=example,dc=com numSubordinates: 50 $In the following search, the numsubordinates virtual attribute is requested but is not returned because the real attributes only control is used:
$ ldapsearch -D "cn=directory manager" -w password -J "2.16.840.1.113730.3.4.17" -b "ou=people,dc=example,dc=com" -s base "objectclass=*" numsubordinates version: 1 dn: ou=People,dc=example,dc=com $
