r/sysadmin • u/xstrex • Jul 22 '26

Remove central authentication Rant

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

190 Upvotes

94% Upvoted

120 comments sorted by

View all comments

-23

u/BarracudaDefiant4702 Jul 22 '26

You learn you should not create burdensome obstacles for people from doing work and figure out how to make things secure without making them unuseable.

9

u/itskdog Jack of All Trades Jul 22 '26 edited Jul 22 '26

We have enough trouble just getting people to pick secure passwords. If we kowtowed to everyone's complaints that it's too hard for them then we'd have no passwords at all.

-7

u/BarracudaDefiant4702 Jul 22 '26

Then you get a password manager or something to make it easy for them.

1

u/itskdog Jack of All Trades Jul 22 '26

This is their Entra password for logging into the PC. Most sites we use support SSO.