Possible to query LDAP from an Irule?

This is one of the concerns I thought of. However would it be possible to persist the attribute so that it only does the LDAP query for a new session? I think we could take the latency hit on the initial connection, our use case is that once users are logged in they stay logged in for long periods of time and we don't have huge numbers of users logging in. We are already doing LDAP authentication at the bigip. I'd like to give this a shot. If you can point me in the right direction that would be greatly appreciated.

 

Thanks,

 

Jason