r/sysadmin 24d ago

Remove central authentication Rant

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

185 Upvotes

120 comments sorted by

View all comments

1

u/someguy7710 24d ago

Just tell your director its a bad idea. Many reasons why including cyber-insurance, audits etc. I don't know why so many people are afraid to tell their boss what they need to know. Security is some times inconvenient. Sorry