Decrypt agent and customer passwords

[shwetamadhani]

In my application i have a login page for agents and customers, for this i need to compare username and password of agents and customers, but passwords are in encrypted form in database. How to decrypt those passwords so i can compare them with those entered by agents and customers while logging in.

[renee]

Mostly the passwords are not encrypted but hashed. So there is no way to get the original password (except brute-force). You should compare the hashed values as MD5('password') equals MD5('password')

[shwetamadhani]

Thanks renee for the reply.
what hash or salt is used in md5.
Original password: root hashed password: roK20XGbWEsSM
Original password: otrs@1234 hashed password: $1$209924$qXbOh.KLHIUaZHR9k0Ued.
how are these hash generated.

[crythias]

It might be better to use the API (see http://dev.otrs.org ) and let OTRS handle the auth.

[shwetamadhani]

Thanks crythias