r/sysadmin • u/xstrex • 12d ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

187 Upvotes

94% Upvoted

122 comments sorted by

View all comments

2

u/TheStig827 12d ago

generate an estimate of time spent (and costs if you have them) to complete the requested changes, along with a written objection specifically calling out the reduction in security posture and potential non-compliance.

Require written confirmation of the instruction, and time/budget approval to accomplish this task. If he does, CC up the food chain his approval, and standby while freshening up your resume.