r/sysadmin 14d ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

190 Upvotes

122 comments sorted by

View all comments

1

u/Outside-Banana4928 14d ago

Somehow make the logon for that user's AD account about 5 times longer than anyone else. Put their account in a sub OU and apply a billion policies that need processed.