MediaWiki extensions manual
Release status: unmaintained
Implementation User identity
Description Allows for authentication against one or many LDAP servers on modern MediaWiki software.
Author(s) shanet555talk
Latest version 0.0.5 (2018-10-12)
Compatibility policy Master maintains backward compatibility.
MediaWiki 1.27+
PHP 7+
Database changes No
License GNU General Public License 3.0 or later
wgLdapAuthDomainNames, wgLdapAuthServers, wgLdapAuthBindDN, wgLdapAuthBindPass, wgLdapAuthBaseDN, wgLdapAuthSearchTree, wgLdapAuthSearchFilter, wgLdapAuthEncryptionType, wgLdapAuthUseLocal, wgLdapAuthRequireDomain, wgLdapAuthMapGroups, wgLdapAuthCacheGroupMap, wgLdapAuthIsActiveDirectory
LDAP, Lightweight Directory Access Protocol, AD, Active Directory, Directory Services, Authentication, Microsoft

The LdapAuth extension allows for an instance to be configured to authenticate against one or many LDAP servers and domains. The extension is built for MediaWiki v1.27 or greater, as it utilizes the new extension and authentication framework.

Installation edit

  • Download and place the file(s) in a directory called LdapAuth in your extensions/ folder.
  • Only when installing from Git, run Composer to install PHP dependencies, by issuing composer install --no-dev in the extension directory. (See task T173141 for potential complications.)
  • Add the following code at the bottom of your LocalSettings.php file:
    wfLoadExtension( 'LdapAuth' );
    $wgLdapAuthDomainNames = 'EXAMPLE';
    $wgLdapAuthServers = 'SERVER_1, SERVER_2';
    $wgLdapAuthBindDN = 'bind_dn@EXAMPLE';
    $wgLdapAuthBindPass = 'MyPassword';
  •   Done – Navigate to Special:Version on your wiki to verify that the extension is successfully installed.

Configuration parameters edit

Visit Extension:LdapAuth/Configuration for details on configuring the extension.