... wfLoadExtension( 'PluggableAuth' ); wfLoadExtension( 'LDAPProvider' ); wfLoadExtension( 'LDAPAuthorization' ); #wfLoadExtension( 'LDAPGroups' ); #wfLoadExtension( 'LDAPUserInfo' ); wfLoadExtension( 'LDAPAuthentication2' ); $LDAPAuthentication2AllowLocalLogin = true; $wgPluggableAuth_EnableLocalLogin = true; $wgGroupPermissions['*']['autocreateaccount'] = true; # End of automatically generated settings. # Add more configuration options below. ################################### $LDAPProviderDomainConfigProvider = function() { $config = [ 'mydom.ain' => [ 'connection' => [ "server" => "mydc1 mydc2", "user" => "CN=ldapuser,OU=Administration,DC=my,DC=domain", "pass" => 'password', "options" => [ "LDAP_OPT_DEREF" => 1 ], "basedn" => "DC=my,DC=domain", "enctype" => "TLS", "port" => "389", "groupbasedn" => "DC=my,DC=domain", "userbasedn" => "DC=my,DC=domain", "searchattribute" => "samaccountname", "searchstring" => "USER-NAME@my.domain", "usernameattribute" => "samaccountname", "realnameattribute" => "cn", "emailattribute" => "mail" ], 'authorization' => [ 'rules' => [ 'groups' => [ 'required' => [ ] ] ] ] ] ]; return new \MediaWiki\Extension\LDAPProvider\DomainConfigProvider\InlinePHPArray( $config ); }; ################################### # 'required' => [ "CN=MYGROUP,OU=Groups,DC=my,DC=domain" ]