Has anyone successfully limited wiki edit rights to the members an Active Directory group?
The LDAPauthentication extension permits "synchronization" between AD groups and wiki groups, but I haven't found any details on the exact nature of that synchronization, just some short descriptions:
http://www.mediawiki.org/wiki/Extension:LDAP_Authentication/Configuration_Op...
Our LDAPauthentication configuration, which limits *logins* to the members of an AD group, is here:
http://www.mediawiki.org/wiki/Extension_talk:LDAP_Authentication#Controlling...
I fantasize that after "synchronization" with AD groups, I'd hope we could do:
$wgGroupPermissions['AD group name']['edit'] = true;
but I have no idea if such a thing is possible.
Thanks for any insights, pointers, etc.!
DanB
mediawiki-l@lists.wikimedia.org