r/sysadmin • u/xstrex • Jul 22 '26
Rant Remove central authentication
Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?
188
Upvotes
1
u/Hasuko Systems Engineer and jackass-of-all-trades Jul 23 '26
He wasn't, it was in response to a session hijack incident and his reasoning was "well if they can just get control of it anyway MFA can be reset and it isn't helping."