I have forked and extended LDAPProvider to add gidNumber resolution so we can use group-based privileges.
https://gerrit.wikimedia.org/r/#/c/mediawiki/extensions/LDAPProvider/+/559951/
When this is merged the LDAPProvider github fetch will need to be switched back.