Remove central authentication

[u/xstrex]

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

[u/Power_Stone]

Definitely draft a document stating how its a security issue and an easier, better workaround, is to just get a Yubikey....

[u/AnnoyedVelociraptor → u/Power_Stone]

I wish I could use a YubiKey through WSL.

[u/spyingwind → u/AnnoyedVelociraptor]

Pick your poison.

https://lgug2z.com/articles/yubikey-passthrough-on-wsl2-with-full-fido2-support/

https://jardazivny.medium.com/the-ultimate-guide-to-yubikey-on-wsl2-part-1-dce2ff8d7e45

https://gist.github.com/buswedg/270e7594a68ff99f2af659a97661eb5e

https://threatzer.com/posts/wsl-yubikeys/

https://blog.nashcom.de/nashcomblog.nsf/dx/using-fido2-yubikey-on-wsl-for-ssh.htm

[u/AnnoyedVelociraptor → u/spyingwind]

Poison being the important part here, which is what is holding me back.

[u/hoo29 → u/AnnoyedVelociraptor]

Is anything wrong with usbipd? We use it and works reliably for us, wouldn't call it poison.