This plugin should be scalable for use in small to large organizations,
and provides the following functionality:

Single and multi domain authentication (including local database)
Simple bind authentication
Proxy bind authentication
Smartcard/CAC/PKI Soft Certificate authentication
Kerberos authentication
SSL/TLS or non-SSL/TLS binding allowed
Nested/Unnested Group based restriction support
Filter based restriction support
Retrieval of user information from LDAP
Email address
Real name
Nickname
Language
Synchronization of LDAP groups to MediaWiki security groups
(LDAP->MediaWiki only)
Nested group support available in 1.2b+
Storing preferences in LDAP
Update passwords
Mail me a password
Update all preferences that are currently retrievable
Creation and modification of users in LDAP