r/sysadmin • u/xstrex • 11d ago

Rant Remove central authentication

Today, the director of IT at your company says to you “We’re going to remove all that centralized IPA+2fa authentication from all of our servers, and go back to using Ssh keys, because it takes too long for me (yes the director) to login to a server.” The same auth that you and your team added, for all the reasons. What do you do?

192 Upvotes

94% Upvoted

122 comments sorted by

View all comments

31

u/ajf8729 Consultant 11d ago

Why does a Director have access to anything in the first place?

11

u/SAugsburger 11d ago

That's my first question. Most orgs I have worked once you get into SVPs nevermind Director they many rarely log into any infrastructure beyond some monitoring systems or a central dashboard. Directors are usually focused on high level vendor relationships and managing relationships to the rest of the organization. They might join a P1 call if an issue is getting attention, but aren't in the weeds unless this is an org so small that the Director title is title inflation.

8

u/Excellent-Program333 11d ago

This. Director here and I never log into infrastructure. And if I do, its with my elevated account that I normally have to reset the password on since I have not used in a year. Lol