in reply to how to validate users password in /etc/shadow inputed from web
I suggest that you use the same encryption algorithm used to encrypt the password. When the user enters his password, encrypt it and compare to whatever's in /etc/shadow. This assumes you'll have read rights to /etc/shadow.
In general, there is no feasible way to decrypt passwords, which is the whole idea behind encrypting them.
|
|---|