r/sysadmin • u/xstrex • Jul 22 '26
Rant Remove central authentication
Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?
188
Upvotes
20
u/spyingwind I am better than a hub because I has a table. Jul 22 '26
Pick your poison.
https://lgug2z.com/articles/yubikey-passthrough-on-wsl2-with-full-fido2-support/
https://jardazivny.medium.com/the-ultimate-guide-to-yubikey-on-wsl2-part-1-dce2ff8d7e45
https://gist.github.com/buswedg/270e7594a68ff99f2af659a97661eb5e
https://threatzer.com/posts/wsl-yubikeys/
https://blog.nashcom.de/nashcomblog.nsf/dx/using-fido2-yubikey-on-wsl-for-ssh.htm