MediaWiki extensions manual
OOjs UI icon advanced-invert.svg
Release status: unmaintained
Implementation User identity
Description Allows for authentication against one or many LDAP servers on modern MediaWiki software.
Author(s) shanet555talk
Latest version 0.0.5 (2018-10-12)
Compatibility policy Master maintains backward compatibility.
MediaWiki 1.27+
PHP 7+
Database changes No
License GNU General Public License 3.0 or later
wgLdapAuthDomainNames, wgLdapAuthServers, wgLdapAuthBindDN, wgLdapAuthBindPass, wgLdapAuthBaseDN, wgLdapAuthSearchTree, wgLdapAuthSearchFilter, wgLdapAuthEncryptionType, wgLdapAuthUseLocal, wgLdapAuthRequireDomain, wgLdapAuthMapGroups, wgLdapAuthCacheGroupMap, wgLdapAuthIsActiveDirectory
LDAP, Lightweight Directory Access Protocol, AD, Active Directory, Directory Services, Authentication, Microsoft

Check usage and version matrix.

The LdapAuth extension allows for an instance to be configured to authenticate against one or many LDAP servers and domains. The extension is built for MediaWiki v1.27 or greater, as it utilizes the new extension and authentication framework.


  • Download and place the file(s) in a directory called LdapAuth in your extensions/ folder.
  • Only when installing from Git, run Composer to install PHP dependencies, by issuing composer install --no-dev in the extension directory. (See task T173141 for potential complications.)
  • Add the following code at the bottom of your LocalSettings.php :
    wfLoadExtension( 'LdapAuth' );
    $wgLdapAuthDomainNames = 'EXAMPLE';
    $wgLdapAuthServers = 'SERVER_1, SERVER_2';
    $wgLdapAuthBindDN = 'bind_dn@EXAMPLE';
    $wgLdapAuthBindPass = 'MyPassword';
  •   Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.

Configuration parametersEdit

Visit Extension:LdapAuth/Configuration for details on configuring the extension.