I just wanted to share some information from T110453
Configuration with AuthManager could look like
$wgAuthManagerAutoConfig['primaryauth'] += [ LdapPrimaryAuthenticationProvider::class => [ 'class' => LdapPrimaryAuthenticationProvider::class, 'args' => [ [ 'authoritative' => true, // don't allow local non-LDAP accounts ] ], 'sort' => 50, // must be smaller than local pw provider ], ];