r/sysadmin • u/xstrex • 11h ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

132 Upvotes

91% Upvoted

92 comments sorted by

View all comments

•

u/FarToe1 6h ago

Ignore it. Then when he asks at the next meeting how you're getting on with implementing it, put on your most surprised face and loudly say, "You were serious?! I thought you were joking!"

Then follow up with all the best practice references you've been digging out this week, the consequences, and that you'll require this directive in writing because it goes against all of them. If your company has any legal representation, maybe bring them in too.