Retrieve IPCC Enterprise agent password from database?

[chunyin.wong]

Hi, I am looking for a way to read the IPCC Enterprise agent's password directly to the Person table.

The password field is encrypted, anyone know the the encryption algorithm and key?

Thanks in advance!

[geoff]

I'm interested in why you want this.

If the agent has lost their password, you simply reset it through the Config GUI Person List tool (as you obviously know).

I'm struggling to think of a scenario where you want to read it from the database and decrypt it. But you probably have one. ;-)

Care to share?

[chunyin.wong]

Hi Geoff, here's the reason: System IPCC 7 uses Active Directory to control login to ipccAdmin and WebView web pages.

To comply with the customer's requirements we built a custom CTI OS Agent Desktop, which will authenticate with Active Directory, and then transparently log in to IPCC with the same username but a blank password.

Then we realized that Supervisor Re-Skilling does not use AD (unlike Admin and WebView) and since our Agent Desktop has a blank password, then Supervisors would log in with a blank password. Security issue of course.

So, one idea is for the Agent Desktop, after authenticating with AD, to read the IPCC password from the IPCC database and log in to IPCC transparently, if possible.

In System IPCC 7, is there a web GUI for Agents / Supervisors to change their passwords? As far as I know, there is only the ipccAdmin web.

[shouri · Accepted solution]

I am not sure if you got this question answered but there isn't anyway to decrypt the agent password. The product uses a one-way hashing mechanism when the password is first created and stored and everytime it is verified.