Thread:Extension talk:LDAP Authentication/Authentication against AD downgrades group membershiåp/reply (3)

So, is the username of the admin user "WikiAdmin" or "Wiki Admin"? Or anything with mixed case?

Something you should know is that the LDAP extension always lowercases the entire username, except for the first character. It does this to avoid creating multiple accounts, since MediaWiki is case sensitive, and most LDAP schemas are not case sensitive when doing binds.

If your username was multi-case before enabling the extension, you actually have two accounts: WikiAdmin, and Wikiadmin. The second, of course, will not have any permissions, since it is a brand new account. My recommendation for admin accounts, which is in the FAQ, is to enable the extension, log in as yourself, disable the extension, log in as the original admin, and give admin/bureaucrat rights to your new user, then re-enable the extension. The old admin user can simply go unused.