Overview #

A Virtual Attribute (aka "Pseudo Attribute", "Constructed Attribute" or "Back-link" where the value is calculated by the LDAP Server Implementation and is not Actually part of the LDAP Entry.

A Virtual Attribute is a type of AttributeTypes in which the Attribute Value are not actually stored in the Back-end but are rather dynamically generated in some manner.

Virtual Attributes may or may NOT be part of the entry's defined ObjectClass Type and sometimes any ObjectClass Type.

The values may be obtained in various manners, depending on the type of Virtual Attribute.

Some Virtual Attribute use a hard-coded value, while others compute their values at runtime based on some kind of logic.

Microsoft Active Directory uses the term "back-link" (means the same as Virtual Attribute) in regards to MemberOf attribute.

Some Well Know Virtual Attribute#

• entryDN
• entryUUID
• etag
• hasSubordinates
• numSubordinates
• subschemaSubentry
• collectiveAttributeSubentries
• governingStructureRule
• structuralObjectClass
• Name
• entryUUID - Is often a Virtual Attribute depending on the LDAP Server Implementation
• collectiveAttributeSubentries
• MemberOf

More Information#

There might be more information for this subject on one of the following:

• 1.2.840.113556.1.2.436
• Active Directory Groups
• AllowedAttributesEffective
• Constructed Attribute
• DirectReports
• Dirxml-uACDontExpirePassword
• Dirxml-uACEncryptedTextPasswordAllowed
• Dirxml-uACHomedirRequired
• Dirxml-uACInterdomainTrustAccount
• Dirxml-uACLockout
• Dirxml-uACNormalAccount
• Dirxml-uACPasswordCantChange
• Dirxml-uACScript
• Dirxml-uACServerTrustAccount
• Dirxml-uACWorkstationTrustAccount
• EntryUUID
• Etag
• Forward Reference
• Glossary Of LDAP And Directory Terminology
• LDAP and Global Catalog
• MemberOf
• MsDS-UserPasswordExpiryTimeComputed
• Pseudo Attribute
• Real Attributes Only Control
• Search Filters Limitations
• SubschemaSubentry
• TokenGroups
• Virtual Attributes Only Control