Thread:Extension talk:LDAP Authentication/Another required groups issue/reply

What version of the extension are you using? The fact that TLS is failing yet authentication is continuing implies the version is old. Also, I notice the following issue; the following has a typo:

It should be:

What debug level do you have? You may want to up it to 4 or 5.

You also don't need to set $wgLDAPLowerCaseUsername in AD. Also, $wgLDAPGroupUseRetrievedUsername's default is false, so you don't need that. Also try this without $wgLDAPGroupsUseMemberOf enabled, as it conflicts with some of the other settings.