By default Penrose does not have operational attributes. However, operational attributes can be added in the configuration.

In proxy configuration, Penrose will pass the operational attributes returned by an LDAP data source to the clients.

In other configuration you can expose certain fields in the data source as operational attributes. See Operational Attributes.

If the data source does not have fields that can be used as operational attributes, you can configure a separate storage (e.g. database) to store the operational attributes.