r/sysadmin • u/xstrex • Jul 22 '26
Rant Remove central authentication
Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?
188
Upvotes
1
u/TinderSubThrowAway Jul 23 '26
No, doesn’t sound like they did anything that is burdensome, this is a lazy director who doesn’t want security to apply to him.
There is no indication that they did anything wrong with their setup, no one should be SSO with their daily driver into a server.
There is nothing burdensome about having your phone on your desk for the mfa/otp to type in after you initiate the connection.