Thread:Extension talk:LDAP Authentication/Trouble with Group Restricted Login/reply

You are missing some options:

Note that you likely don't need, and probably shouldn't use $wgLDAPLowerCaseUsername.