Add a new rc.conf entry, kerberos5_server_flags, which allows the

administrator to specify additional start-up flags to the Kerberos
5 Authentication Server.

MFC after:	3 days

etc/defaults/rc.conf

@@ -197,6 +197,7 @@ named_symlink_enable="YES"	# Symlink the chrooted pid file
 #
 kerberos5_server_enable="NO"	# Run a kerberos 5 master server (or NO).
 kerberos5_server="/usr/libexec/kdc"	# path to kerberos 5 KDC
+kerberos5_server_flags=""	# Additional flags to the kerberos 5 server
 kadmind5_server_enable="NO"	# Run kadmind (or NO)
 kadmind5_server="/usr/libexec/kadmind"	# path to kerberos 5 admin daemon
 kpasswdd_server_enable="NO"	# Run kpasswdd (or NO)

etc/rc.d/kerberos

@@ -12,6 +12,6 @@ name="kerberos5"
 load_rc_config $name
 rcvar="kerberos5_server_enable"
 command="${kerberos5_server}"
-command_args="&"
+command_args="${kerberos5_server_flags} &"
 
 run_rc_command "$1"

share/man/man5/rc.conf.5

@@ -1377,6 +1377,11 @@ If
 is set to
 .Dq Li YES
 this is the path to Kerberos 5 Authentication Server.
+.It Va kerberos5_server_flags
+.Pq Vt str
+Empty by default.
+This variable contains additional flags to be passed to the Kerberos 5
+authentication server.
 .It Va kadmind5_server_enable
 .Pq Vt bool
 Set to