title: Granular access control for MediaWiki with LDAP
body: <p>My company has a MediaWiki setup which we are looking to make [partially] client accessible. Ideally each client would be able to see only their own page. Our wiki requires the user to be logged into view or edit, and we have the LDAP plugin (<a href="http://www.mediawiki.org/wiki/Extension%3aLDAP_Authentication" rel="nofollow">This one,</a> specifically) so we can use our Active Directory credentials.</p>
  
  <p>I see this question has come up before a few years ago, but I didn't see an question dealing with LDAP in particular. Can we manage a specific AD account if we give clients one on our domain for this purpose? Alternatively, is there a way to give clients a login directly into the wiki (sort of like logging locally into the computer, instead of the domain), that we could control the access rights of?</p>
  
  <p>For reference: we are on MediaWiki version 1.19.1, PHP version 5.3.15, MySQL version 5.0.96-winx64, and the installation is running on Windows Server 2008 R2 x64 (IIS 7.5).</p>
  
  <p>Thanks very much for the help!</p>