Administration Reference


[Return to Library] [Contents] [Previous Topic] [Bottom of Topic] [Next Topic] [Index]

rcp (AFS version)

Purpose

Copies a file on a remote machine

Synopsis

rcp [-p]  <file1>  <file2>
   
rcp [-r]  [-p]  <file>+  <directory>

Description

The AFS-modified rcp program functions like the standard UNIX rcp program, but also passes the issuer's AFS token to the remote machine's Cache Manager, to enable authenticated access to the AFS filespace via that machine.

Token passing is most effective if both the remote machine and local machine belong to the same cell, because the rcp command can pass only one token even if the user has several tokens--it passes the token listed first in the output from the tokens command. If the remote and local machine do not belong to the same cell, the possibilities are as follows:

In addition to running the AFS version of the rcp binary on the machine where the rcp command is issued, other configuration changes are necessary for token passing to work properly. See the Cautions section for a list.

The AFS version of the rcp command is compatible with the standard inetd command, but token passing works only if both programs are modified to handle AFS tokens. If only one of them is modified, the issuer accesses the AFS filespace through the remote machine as the anonymous user.

Cautions

The AFS distribution does not include an AFS-modified version of this command for every system type, in some cases because the operating system vendor has already modified the standard version in the required way. For details, see the IBM AFS Release Notes.

The AFS rcp command does not allow third party copies, in which neither the source file nor the target file is stored on the machine where the command is issued. The standard UNIX rcp command claims to provide this functionality.

For security's sake, use the AFS version of the rcp command only in conjunction with PAGs, either by using an AFS-modified login utility, issuing the pagsh command before obtaining tokens, or including the -setpag flag to the klog command.

Several configuration requirements and restrictions are necessary for token passing to work correctly with an AFS-modified version of the rcp command. Some of these are also necessary with the standard UNIX version, but are included here because the issuer accustomed to AFS protections is possibly unlikely to consider them. There are possibly other UNIX-based requirements and restrictions not mentioned here; consult the UNIX manual page. (One important one is that no stty commands can appear in the issuer's shell initialization file, such as the .cshrc file.)

The requirements and restrictions for token passing include the following.

Options

Consult the UNIX manual page for the rcp command.

Privilege Required

None

Related Information

inetd (AFS version)

tokens

UNIX manual page for rcp

IBM AFS Release Notes


[Return to Library] [Contents] [Previous Topic] [Top of Topic] [Next Topic] [Index]



© IBM Corporation 2000. All Rights Reserved