Thread:Extension talk:LDAP Authentication/Trouble with Group Restricted Login/reply (3)

$wgLDAPGroupObjectclass needs to be explicitly set to this:

'group' here actually means the word group, and not something to be substituted.