Thanks to everyone.
Too bad, I need the second attribute to be real, not virtual.
I'll have a cronjob perform an ldapsearch on the first attribute followed by a conditional
ldapmodify of the second one.

Still, if anyone knows of an overlay that does the job on real time, please let me know