are responsible for dynamically generating attribute values that appear in entries but are not persistently stored in the backend. Virtual attributes are associated with a virtual attribute provider, which contains the logic for generating the value. ds-cfg-virtual-attribute top Specifies the fully-qualified name of the virtual attribute provider class that generates the attribute values. org.opends.server.api.VirtualAttributeProvider ds-cfg-java-class Indicates whether the is enabled for use. ds-cfg-enabled Specifies the attribute type for the attribute whose values are to be dynamically assigned by the virtual attribute. ds-cfg-attribute-type Specifies the base DNs for the branches containing entries that are eligible to use this virtual attribute. If no values are given, then the server generates virtual attributes anywhere in the server. The location of the entry in the server is not taken into account when determining whether an entry is eligible to use this virtual attribute. ds-cfg-base-dn Specifies the LDAP scope associated with base DNs for entries that are eligible to use this virtual attribute. whole-subtree Search the base object only. Search the immediate children of the base object but do not include any of their descendants or the base object itself. Search the entire subtree below the base object but do not include the base object itself. Search the base object and the entire subtree below the base object. ds-cfg-scope Specifies the DNs of the groups whose members can be eligible to use this virtual attribute. If no values are given, then group membership is not taken into account when generating the virtual attribute. If one or more group DNs are specified, then only members of those groups are allowed to have the virtual attribute. Group membership is not taken into account when determining whether an entry is eligible to use this virtual attribute. ds-cfg-group-dn Specifies the search filters to be applied against entries to determine if the virtual attribute is to be generated for those entries. If no values are given, then any entry is eligible to have the value generated. If one or more filters are specified, then only entries that match at least one of those filters are allowed to have the virtual attribute. (objectClass=*) .* STRING Any valid search filter string. ds-cfg-filter Specifies the behavior that the server is to exhibit for entries that already contain one or more real values for the associated attribute. real-overrides-virtual Indicates that any real values contained in the entry are preserved and used, and virtual values are not generated. Indicates that the virtual attribute provider suppresses any real values contained in the entry and generates virtual values and uses them. Indicates that the virtual attribute provider is to preserve any real values contained in the entry and merge them with the set of generated virtual values so that both the real and virtual values are used. ds-cfg-conflict-behavior