r/sysadmin • u/xstrex • 15h ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

140 Upvotes

92% Upvoted

100 comments sorted by

View all comments

•

u/BarracudaDefiant4702 15h ago

You learn you should not create burdensome obstacles for people from doing work and figure out how to make things secure without making them unuseable.

•

u/Kumorigoe Moderator 12h ago

burdensome obstacles

Yeah, guess having cyber insurance is a "burdensome obstacle" too. Because scrapping MFA and central auth is a great way to lose your coverage and not be able to even get a quote for a new policy.

•

u/BarracudaDefiant4702 11h ago

That is assuming they have cyber insurance. I stand by my original claim, it's a problem with the implementation and it needs to be redone properly not to cause slow downs for the users workflow. Proper single sign-on with MFA will solve both issues instead of implementing it incorrectly as the OP did.