Hi,
wanting to implement Dokuwiki for a closed user group and wanting to put a restriction on a group membership, I found no existing way to put a requirement on LDAP group membership.
(Yes, I know it would be able to restrict access to the pages based on groups, but I want to be able to prevent access in the first place.)
I wrote this patch to make it possible to configure the ldap authenticator to put a requirement on specific LDAP group membership.
In the conf/local.php, this amounts to:
$conf['auth']['ldap']['reqgrouptree'] = 'ou=Wiki,ou=Services,dc=example,dc=com';
$conf['auth']['ldap']['reqgroupfilter'] = '(&(cn=Users)(objectClass=groupOfUniqueNames)(uniqueMember=%{dn}))';
Feel free to incorporate the attached patch.