Extension:LDAP Authentication/Roadmap

About - Requirements - Examples - Configuration Options - Changelog - Roadmap - Suggestions - User provided info - FAQ - Support

MediaWiki extensions manual

LDAP Authentication Release status: stable
Implementation	User identity
Description	Provides LDAP authentication, and some authorization functionality for MediaWiki
Author(s)	Ryan Lane (Ryan lanetalk)
Latest version	2.1.0 (2018-10-11)
Compatibility policy	Master maintains backwards compatibility.
MediaWiki	1.19-1.26
Database changes	Yes
License	GNU General Public License 2.0 or later
Download	Download extension Git [?]: Download Git master browse repository (GitHub) commit history repository contributors (GitHub) code review
Parameters $wgLDAPAutoAuthUsername $wgLDAPGroupsUseMemberOf $wgLDAPDomainNames $wgLDAPEncryptionType $wgLDAPSearchAttributes $wgLDAPGroupUseFullDN $wgLDAPPort $wgLDAPWriterPassword $wgLDAPUserBaseDNs $wgLDAPGroupBaseDNs $wgLDAPUseLDAPGroups $wgLDAPAutoAuthDomain $wgLDAPWriteLocation $wgLDAPProxyAgentPassword $wgLDAPUseLocal $wgLDAPLockPasswordPolicy $wgLDAPLockOnBlock $wgLDAPLocallyManagedGroups $wgLDAPAddLDAPUsers $wgLDAPProxyAgent $wgLDAPServerNames $wgLDAPPasswordHash $wgLDAPAuthAttribute $wgLDAPGroupSearchNestedGroups $wgLDAPExcludedGroups $wgLDAPGroupNameAttribute $wgLDAPRequiredGroups $wgLDAPBaseDNs $wgLDAPGroupAttribute $wgLDAPOptions $wgLDAPGroupsPrevail $wgLDAPDisableAutoCreate $wgLDAPGroupObjectclass $wgLDAPLowerCaseUsername $wgLDAPUpdateLDAP $wgLDAPDebug $wgLDAPMailPassword $wgLDAPSearchStrings $wgLDAPPreferences $wgLDAPActiveDirectory $wgLDAPGroupUseRetrievedUsername $wgLDAPGroupSearchPosixPrimaryGroup $wgLDAPWriterDN
Hooks used BlockIpComplete LoadExtensionSchemaUpdates UnblockUserComplete
Hooks provided ChainAuth LDAPSetCreationValues LDAPRetrySetCreationValues LDAPUpdateUser SetUsernameAttributeFromLDAP
Check usage and version matrix.
Issues	Open tasks · Report a bug

Warning:

The extension has not been fully updated for MediaWiki 1.27+ (AuthManager); LdapAutoAuthentication will not work with that version. See gerrit:286705 for details.

Next version

I have a bad memory, and need a to-do list. If I have promised to add something for you in the next version, and it isn't in the list below, please add it.

v1.2d

• Fix referencs to $ldapconn that should be $this->ldapconn in primary group code for AD (in SVN)
• Fix User not loaded from session issue
• Change behavior of locally managed groups to allow MediaWiki specific groups to be overridden
• Fix the username-authentication issue once and for all (hopefully without nasty hacks)
• Fix the issue where local users can't change their passwords
• Add strictUserAuth support
• Add support for automatic domain discovery
• Refactor the code to handle configuration globals differently
  • Add an option for schema type, so that common options can be automatically configured
  • Fallback to defaults when certain options aren't set
• Fix memberOf with memberOf overlays (in SVN)
• Add check for non-returned data
• Add $wgLDAPAllowLocalUsers and $wgLDAPRequiredUsers as a way to allow a list of local users (e.g., WikiSysop) and a list of LDAP users for access.
• Ensure compatibility with PHP 5.3
• Fix issue with excluded groups
• Support dynamic groups

Possibly in a future version

• Allow changes to LDAP groups via Special:Userrights
• Support for choosing default search scope, and defining it for multiple domains.
• Support for adding users/changing passwords in Active Directory.
• Support for using LDAP as a complete user backend (including user options and such). Using ldap as a backend will require a custom schema to be loaded in the LDAP server.
• Optionally munge usernames when using auto-auth