From owner-freebsd-current  Tue Nov  4 23:26:53 1997
Return-Path: <owner-freebsd-current>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id XAA19591
          for current-outgoing; Tue, 4 Nov 1997 23:26:53 -0800 (PST)
          (envelope-from owner-freebsd-current)
Received: from kithrup.com (kithrup.com [205.179.156.40])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id XAA19580
          for <current@freebsd.org>; Tue, 4 Nov 1997 23:26:50 -0800 (PST)
          (envelope-from sef@Kithrup.COM)
Received: (from sef@localhost) by kithrup.com (8.8.5/8.6.6) id XAA20440; Tue, 4 Nov 1997 23:26:49 -0800 (PST)
Date: Tue, 4 Nov 1997 23:26:49 -0800 (PST)
From: Sean Eric Fagan <sef@Kithrup.COM>
Message-Id: <199711050726.XAA20440@kithrup.com>
To: current@freebsd.org
Reply-To: sef@Kithrup.COM
Subject: Proposed kerberos-related rc.conf change
Organization: Kithrup Enterprises, Ltd.
Sender: owner-freebsd-current@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

kadmind is started with -n; I would also consider making it a generic
"kerberos_stash" flag -- either empty, or "-n" -- and then use it for both.

Index: etc/rc.conf
===================================================================
RCS file: /home/ncvs/src/etc/rc.conf,v
retrieving revision 1.32
diff -u -r1.32 rc.conf
--- rc.conf	1997/10/31 01:58:53	1.32
+++ rc.conf	1997/11/05 07:19:21
@@ -44,6 +44,8 @@
 named_enable="NO"		# Run named, the DNS server (or NO).
 named_flags="-b /etc/namedb/named.boot" # Flags to named (if enabled).
 kerberos_server_enable="NO"	# Run a kerberos master server (or NO).
+kerberos_flags=""		# Flags (typically -n) to pass to kerberos
+				# server at startup
 rwhod_enable="NO"		# Run the rwho daemon (or NO).
 amd_enable="NO"			# Run amd service with $amd_flags (or NO).
 amd_flags="-a /net -c 1800 -k i386 -d my.domain -l syslog /host /etc/amd.map"
Index: etc/rc.network
===================================================================
RCS file: /home/ncvs/src/etc/rc.network,v
retrieving revision 1.11
diff -u -r1.11 rc.network
--- rc.network	1997/09/18 22:43:48	1.11
+++ rc.network	1997/11/05 07:20:06
@@ -222,7 +222,8 @@
 
     # Kerberos runs ONLY on the Kerberos server machine
     if [ "X${kerberos_server_enable}" = X"YES" ]; then
-	    echo -n ' kerberos';	kerberos >> /var/log/kerberos.log &
+	    echo -n ' kerberos'; \
+		kerberos ${kerberos_flags} >> /var/log/kerberos.log &
 	    echo -n ' kadmind'; \
 		    (sleep 20; kadmind -n >/dev/null 2>&1 &) &
     fi
Index: share/man/man5/rc.conf.5
===================================================================
RCS file: /home/ncvs/src/share/man/man5/rc.conf.5,v
retrieving revision 1.5
diff -u -r1.5 rc.conf.5
--- rc.conf.5	1997/11/02 21:45:31	1.5
+++ rc.conf.5	1997/11/05 07:17:49
@@ -204,6 +204,15 @@
 .Ar YES
 if you want to run a Kerberos authentication server
 at boot time.
+.It Ar kerberos_flags
+(str) if
+.Ar kerberos_server_enable
+is set to
+.Ar YES ,
+these are the flags (typically
+.Ar -n )
+to pass to
+.Xr kerberos 1 .
 .It Ar rwhod_enable
 (bool) If set to
 .Ar YES ,