The virtual attributes only control is a [supportedControl] that may be used to request that the server only include [Virtual Attribute] in matching entries.  That is, real attributes will be excluded from [SearchResultEntry].

The virtual attributes only control has a request [OID|Definition -- Object Identifier] of "[2.16.840.1.113730.3.4.19]" and no value.

The following example shows a search on the base DN without the virtual attributes only control:
{{{
$ ldapsearch -p 1389 -D "cn=directory manager" -w password -b "dc=example,dc=com" \
  -s base "objectclass=*"
version: 1
dn: dc=example,dc=com
objectClass: domain
objectClass: top
dc: example
$
}}}
The following example shows the same search with the virtual attributes only control:
{{{
$ ldapsearch -p 1389 -D "cn=directory manager" -w password -J "2.16.840.1.113730.3.4.19" \
  -b "dc=example,dc=com" -s base "objectclass=*"
version: 1
dn: dc=example,dc=com
$
}}}

!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]