[rt-users] RT3 encryption

[Scott T. Cameron]

Hi there,

How are the passwords stored in the database?  It looks like an MD5 hash without a salt.  We're attempting to migrate from the internal auth to external authentication, but don't want to go and ask the users for their passwords.  I extracted the hashes from the Users table, but there is no salt.  Is it stored somewhere else?  Extrapolated based on certain criteria?

Can anyone offer some insight?

Regards,
Scott