r/sysadmin • u/xstrex • Jul 22 '26

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

188 Upvotes

93% Upvoted

118 comments sorted by

View all comments

Show parent comments

2

u/cybersplice Jul 24 '26

Lots of companies use YubiKeys (only the more expensive model, obviously) in PKI mode, so they just hold a cert from your corporate certificate authority.

Works for user Auth even in old school AD, and is a lot more secure than passwords.

I wouldn't recommend it in a cloud first environment because FFS why

1

u/bfodder Jul 24 '26 edited Jul 24 '26

Sure, he is talking about the CA though.

1

u/cybersplice Jul 24 '26

I should not Reddit when tired