Extension:LDAP Authentication/Configuration Options

The following are options that are usable in "LocalSettings.php":

(These are examples of the extension options, this is not a working example however)

'''Options will not work if put at the beginning of LocalSettings.php. Please place them at the end of LocalSettings.php'''

Enabling the plugin
First, download the snapshot; specifically, always download the trunk version. Follow the directions from the Extension Distributor for where to extract the snapshot.

After extracting the snapshot, run the update script
The LdapAuthentication extension must add tables to MediaWiki's database. You must run update.php:

When using password authentication
Edit $IP/LocalSettings.php

When using auto-authentication
Edit $IP/LocalSettings.php

You'll need to set up $wgLDAPProxyAgent and $wgLDAPProxyAgentPassword so LDAP can look up the user groups.

Debugging options
Make sure you set this after the require_once line. Otherwise it won't work.

Specifying the debug file
This is required in version 1.2b+:

Group options
Using LDAP groups in any way requires $wgLDAPBaseDNs to be set!

The following settings pertain to both synchronizing groups, and group based login restriction.

Synchronizing LDAP groups with MediaWiki security groups
Warning: MediaWiki group names cannot contain whitespace, but LDAP group names can. If you synchronize an LDAP group name that contains whitespace, it will not work properly on Special:UserRights. See bug T87376.

Auto authentication options
It is highly recommended to see the Smartcard Configuration Examples, and Kerberos Configuration Examples pages before messing with these options.

If you use Smartcard and/or Kerberos authentication, it would be foolish not to use HTTPS and SSL/TLS

Yet another working AD configuration example - with SSO
Wiki-PHP-Configuration-File: LocalSettings.php Apache-Configuration-File: /etc/apache2/sites-enabled/001_wiki_apache_host_configuration.conf