Extension:LdapGroups

This is MediaWiki extension to allow users to manage the membership of their MediaWiki groups using a directory server via LDAP such as Microsoft's ActiveDirectory.

Configuration
You need to specify a file in ini format with the authenticaton credentials. These will be used to connect to the directory server.

Your mapping of MediaWiki groups to the distinguished names (dn) of the groups on your directory server should be provided in the $LdapGroupsMap variable. For example:

TODO
Since nested groups are not resolved, multiple DNs have to be specified as above. Obviously, this is less than ideal. I plan to add support for LDAP_MATCHING_RULE_IN_CHAIN and allow you to use it by setting $LdapGroupsUseMatchingRuleInChainQueries to true.

I also plan to have a Special Page to set up to allow for group mappings soon.