LDap & Active Directory Groups

Hey,

I am trying to configure LDap to authenticate a user by the group they are contained in within Active Directory on a mediawiki site, At the moment i have cofigured LDap so that any user within active directory can logon to the wiki but i want to limit it down to a certain group.

I have being trying to solve this for a few days and have tried enless amounts of different code but nothing has been working..

If anyone has any suggestions or ideas they would be greatly appricated .

Thanks,
Karl.

Can you show me what you've tried so far? I'm assuming you are doing it within PHP or another scripting language. Or are you doing it in apache?

Yea sure, i am using php but with IIS not apache. (Below is the code from my last two attempts)

require_once( "includes/LdapAuthentication.php" );
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array( "MyDomain" );
$wgLDAPServerNames = array( "MyDomain"=>"example.eu.ad.site.com" );
$wgLDAPSearchStrings = array( "MyDomain"=>"MyDomain\USER-NAME" );
$wgLDAPUseSSL = false;
$wgLDAPUseLocal = false;
$wgMinimalPasswordLength = 1;
$wgLDAPRetrievePrefs = false;
$wgLDAPBaseDNs = array( "MyDomain"=>"dc=eu,dc=ad,dc=site,dc=com" );
$wgLDAPRequiredGroups = array( "MyDomain"=> array("CN=editors,OU=users,OU=branch,DC=eu,DC=ad,DC=site,DC=com") );
$wgLDAPGroupUseFullDN = array( "MyDomain"=> false );
$wgLDAPGroupObjectclass = array( "MyDomain"=>"*" );
$wgLDAPGroupAttribute = array( "MyDomain"=>"USER-NAME" );
$wgLDAPGroupSearchNestedGroups = array( "MyDomain"=> false );



require_once( "includes/LdapAuthentication.php" );
$wgAuth = new LdapAuthenticationPlugin();
$wgLDAPDomainNames = array( "MyDomain" );
$wgLDAPServerNames = array( "MyDomain"=>"example.eu.ad.site.com" );
$wgLDAPEncryptionType = "clear";
$wgLDAPSearchStrings = array( "domain"=>"USER-NAME@MyDomain" );
$wgLDAPUseSSL = false;
$wgLDAPUseLocal = false;
$wgMinimalPasswordLength = 1;
$wgLDAPRetrievePrefs = false;
$wgLDAPRequiredGroups = array( "MyDomain"=> array("cn=editors,ou=users,ou=branch,dc=eu,dc=ad,dc=site,dc=com") );
$wgLDAPGroupUseFullDN = array( "MyDomain"=> false );
$wgLDAPGroupObjectclass = array( "MyDomain"=>"*" );
$wgLDAPGroupAttribute = array( "Domain"=>"SAMAccountNAme" );
$wgLDAPGroupSearchNestedGroups = array( "MyDomain"=> false );


I am using the LDapauthentication file from bugzilla.wikipedia[dot]org /show_bug.cgi?id=814 , also i am using version 1.1d


nothing seems to want to work so any suggestions are welcome....