in reply to how to validate users password in /etc/shadow inputed from web

I suggest that you use the same encryption algorithm used to encrypt the password. When the user enters his password, encrypt it and compare to whatever's in /etc/shadow. This assumes you'll have read rights to /etc/shadow.

In general, there is no feasible way to decrypt passwords, which is the whole idea behind encrypting them.

  • Comment on Re: how to validate users password in /etc/shadow inputed from web