Ldap query from ltm

So this value is defined by the client? Are you authenticating the user beyond this query string value?

To get this query string value, you can use the URI::query command. Example:

when HTTP_REQUEST {
    if { [string tolower [HTTP::uri]] contains "microsoft-server-activeSync?cmd" } {
        set user [URI::query [HTTP::uri] User]
        if { [class match $user my_datagroup] } {
             User in data group. Allow access?
        }
    }       
}

By the way, is this user value in every request, or do we need to set and track a session token beyond this (initial?) request?