Quoting svetlana <svetlana(a)fastmail.com.au>au>: Regarding "Extension:LDAP Authentication/Kerberos Configuration Examples", the description for it includes: "If you do not need LDAP support, and only need Kerberos support, this is not the extension for you; please see the HttpAuth extension" However, "Extension:HttpAuth" hasn't been maintained since 2008 and no longer supports recent releases of MediaWiki. Luckily, the archived page for it states that "Extension:Auth remoteuser" can be used in its place. This looks promising and I'd like to try it out, but unfortunately when I attempt to download it there is an error: Please configure $wgExtDistList and $wgExtDistArchiveAPI This seems to be a bug, hopefully temporary. I'll try again later. Thanks, Jaap

Quoting Jaap Winius <jwinius(a)umrk.nl>nl>: See https://www.mediawiki.org/wiki/Extension:AutomaticREMOTE_USER Success! That was pretty easy, actually. About the trickiest part was figuring out how to set the REMOTE_USER variable in my Apache configuration (a little after the mod-auth-kerb authentication section, of course): SetEnv REMOTE_USER $REDIRECT_REMOTE_USER This is possible after enabling the 'env' module for Apache. After that, it all worked in one go. Thanks! Jaap