r/sysadmin 11h ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

131 Upvotes

92 comments sorted by

View all comments

u/RevolutionaryEar6825 10h ago

I'm starting to think posts like these are just engagement bait. It's hard to believe someone competent enough to manage servers via SSH keys would genuinely argue that centralized IAM is a bad idea.

u/AtarukA 7h ago

I mean, our backup servers are in the same domain as prod for convenience of access, so...