appadmin.py ships with the application, so if you really copied the "controllers" folder you'd have the same file. BTW, pbkdf2 was introduced ~2 months ago. BTW2: if you copied an app that used the sha512 algo an tried to load it into a *newer* web2py release, as soon as the user entered the password would be updated to the pbkdf2 algo (unless you were using some explicit IS_CRYPT() validator or the auth_key param on auth, I think). BTW3: to pass around an app just log into admin and hit "create package" (or tar.gz the entire applications/myapp folder and load it locally with "upload package") BTW4: I seem to recall that very old python calculated hashes differently. However, it would not be the case unless BTW2 (some fixed auth_key in auth instantiation or explicit IS_CRYPT() validator)
--
