Extension:LdapGroups

This is MediaWiki extension to allow users to manage the membership of their MediaWiki groups using a directory server via LDAP such as Microsoft's ActiveDirectory.

ini file
You need to specify connection parameters for your LDAP server. Since you may want to use a different LDAP server for different environments (e.g. dev, prod), the credentials are stored in a separate file in ini file format. These will be used to connect to the directory server. Specify the ini file in by pointing to it in your LocalSettings.php file by setting:

The file takes the following format:

Group mapping
Your mapping of MediaWiki groups to the distinguished names (dn) of the groups on your directory server should be provided in the $LdapGroupsMap variable. For example:

Nested groups
Nested groups are correctly resolved using LDAP_MATCHING_RULE_IN_CHAIN queries if you add the following to your LocalSettings.php:

TODO
I also plan to have a Special Page to set up to allow for group mappings soon.