---
name: "krb5-rcp"
section: "1"
platform: "linux"
package: "krb5-clients"
version: "1:1.0.1-4"
release: "Debian 7 (Wheezy)"
platforms: ["linux"]
url: "https://new.carta.tech/krb5-rcp"
---

# krb5-rcp(1)

remote file copy

## NAME

rcp - remote file copy

## SYNOPSIS

**rcp** \[**-p**\] \[**-x**\] \[**-k** *realm* \] \[**-c** *ccachefile*\] \[**-C** *configfile*\] \[**-D** *port*\] \[**-N**\] \[**-PN \| -PO**\] *file1 file2*

**rcp** \[**-p\] \[-x\] \[-k** *realm***\] \[-r\] \[-D** *port***\] \[-N\]** **\[-PN \| -PO\]** *file ... directory*

**rcp** **\[-f \| -t\]** *...*

## DESCRIPTION

**Rcp** **copies files between machines.  Each** *file* **or** *directory* **argument is either a remote file name of the form \`\`rhost:path'', or a** **local file name (containing no \`:' characters, or a \`/' before any** **\`:'s).**

**By default, the mode and owner of** *file2* **are preserved if it already existed; otherwise the mode of the source** **file modified by the** [*umask*(2)](/umask/2.md) **on the destination host is used.**

**If** *path* **is not a full path name, it is interpreted relative to your login** **directory on** *rhost*. **A**  *path* **on a remote host may be quoted (using \\, ", or ´) so that the** **metacharacters are interpreted remotely.**

**Rcp** **does not prompt for passwords; it uses Kerberos authentication when** **connecting to** *rhost*. **Each user may have a private authorization list in a file .k5login in** **his login directory.  Each line in this file should contain a Kerberos** **principal name of the form** *principal/instance@realm*. **If there is a ~/.k5login file, then access is granted to the account if** **and only if the originater user is authenticated to one of the** **principals named in the ~/.k5login file.  Otherwise, the originating** **user will be granted access to the account if and only if the** **authenticated principal name of the user can be mapped to the local** **account name using the aname -\> lname mapping rules (see** *krb5\_anadd*(8) **for more details).**

## OPTIONS

- **-p**

  **attempt to preserve (duplicate) the modification times and modes of the** **source files in the copies, ignoring the** *umask*.

- **-x**

  **encrypt all information transferring between hosts.**

- **-k** *realm*

  **obtain tickets for the remote host in** *realm* **instead of the remote host's realm as determined by** [*krb\_realmofhost*(3)](/krb_realmofhost/3.md).

- **-c** *ccachefile*

  **change the default credentials cache file to**  *ccachefile*

- **-r**

  **if any of the source files are directories, copy each subtree rooted at** **that name; in this case the destination must be a directory.**

- **-PN**

  - **-PO**

  **Explicitly request new or old version of the Kerberos \`\`rcmd''** **protocol.  The new protocol avoids many security problems found in the** **old one, but is not interoperable with older servers.  (An** **"input/output error" and a closed connection is the most likely result** **of attempting this combination.)  If neither option is specified, some** **simple heuristics are used to guess which to try.**

- **-D** *port*

  **connect to port** *port* **on the remote machine.**

- **-N**

  **use a network connection, even when copying files on the local machine** **(used for testing purposes).**

- **-f -t**

  **These options are for internal use only.  They tell the** **remotely-running rcp process (started via the Kerberos remote shell** **daemon) which direction files are being sent.  These options should** **not be used by the user.  In particular, -f does not mean** **that the user's Kerberos ticket should be forwarded!**

**Rcp** **handles third party copies, where neither source nor target files are on** **the current machine.  Hostnames may also take the form \`\`rname@rhost''** **to use** *rname* **rather than the current user name on the remote host.**

## FILES

- **~/.k5login**

  **(on remote host) - file containing Kerberos principals that are allowed** **access.**

## SEE ALSO

**[cp(1)](/cp/1.md), [ftp(1)](/ftp/1.md), [rsh(1)](/rsh/1.md), [rlogin(1)](/rlogin/1.md), [kerberos(3)](/kerberos/3.md), krb\_getrealm(3), [kshd(8)](/kshd/8.md), [rcp(1)](/rcp/1.md)**  **\[UCB version\]**

## BUGS

**Rcp** **doesn't detect all cases where the target of a copy might be a file in** **cases where only a directory should be legal.**

**Rcp** **is confused by any output generated by commands in a .login,** **.profile, or .cshrc file on the remote host.**

**Kerberos is only used for the first connection of a third-party copy;** **the second connection uses the standard Berkeley rcp protocol.**