Extension:LDAP Authentication/Roadmap

About - Requirements - Examples - Configuration Options - Changelog - Roadmap - Suggestions - User provided info - FAQ - Support

MediaWiki extensions manual

LDAP Authentication Release status: unmaintained
Implementation	User identity
Description	Provides LDAP authentication, and some authorization functionality for MediaWiki
Author(s)	Ryan Lane (Ryan lanetalk)
Latest version	2.1.0 (2018-10-11)
Compatibility policy	Snapshots releases along with MediaWiki. Master is not backward compatible.
MediaWiki	1.19-1.26
Database changes	Yes
License	GNU General Public License 2.0 or later
Download	Download extension Git [?]: Download Git master browse repository (GitHub) commit history repository contributors (GitHub) code review
Parameters $wgAutoAuthUsername $wgGroupsUseMemberOf $wgDomainNames $wgEncryptionType $wgSearchAttributes $wgGroupUseFullDN $wgPort $wgWriterPassword $wgUserBaseDNs $wgGroupBaseDNs $wgUseLDAPGroups $wgAutoAuthDomain $wgWriteLocation $wgProxyAgentPassword $wgUseLocal $wgLockPasswordPolicy $wgLockOnBlock $wgLocallyManagedGroups $wgAddLDAPUsers $wgProxyAgent $wgServerNames $wgPasswordHash $wgAuthAttribute $wgGroupSearchNestedGroups $wgExcludedGroups $wgGroupNameAttribute $wgRequiredGroups $wgBaseDNs $wgGroupAttribute $wgOptions $wgGroupsPrevail $wgDisableAutoCreate $wgGroupObjectclass $wgLowerCaseUsername $wgUpdateLDAP $wgDebug $wgMailPassword $wgSearchStrings $wgPreferences $wgActiveDirectory $wgGroupUseRetrievedUsername $wgGroupSearchPosixPrimaryGroup $wgWriterDN
Hooks used BlockIpComplete LoadExtensionSchemaUpdates UnblockUserComplete
Hooks provided ChainAuth LDAPSetCreationValues LDAPRetrySetCreationValues LDAPUpdateUser SetUsernameAttributeFromLDAP
Check usage and version matrix.
Issues	Open tasks · Report a bug

Warning:

The extension has not been fully updated for MediaWiki 1.27+ (AuthManager); LdapAutoAuthentication will not work with that version. See gerrit:286705 for details.

Next version

I have a bad memory, and need a to-do list. If I have promised to add something for you in the next version, and it isn't in the list below, please add it.

v1.2d

• Fix referencs to $ldapconn that should be $this->ldapconn in primary group code for AD (in SVN)
• Fix User not loaded from session issue
• Change behavior of locally managed groups to allow MediaWiki specific groups to be overridden
• Fix the username-authentication issue once and for all (hopefully without nasty hacks)
• Fix the issue where local users can't change their passwords
• Add strictUserAuth support
• Add support for automatic domain discovery
• Refactor the code to handle configuration globals differently
  • Add an option for schema type, so that common options can be automatically configured
  • Fallback to defaults when certain options aren't set
• Fix memberOf with memberOf overlays (in SVN)
• Add check for non-returned data
• Add $wgLDAPAllowLocalUsers and $wgLDAPRequiredUsers as a way to allow a list of local users (e.g., WikiSysop) and a list of LDAP users for access.
• Ensure compatibility with PHP 5.3
• Fix issue with excluded groups
• Support dynamic groups

Possibly in a future version

• Allow changes to LDAP groups via Special:Userrights
• Support for choosing default search scope, and defining it for multiple domains.
• Support for adding users/changing passwords in Active Directory.
• Support for using LDAP as a complete user backend (including user options and such). Using ldap as a backend will require a custom schema to be loaded in the LDAP server.
• Optionally munge usernames when using auto-auth