Reported by & fix tested by Dave Anderson. Thanks!
ok deraadt@

initially intended for YubiKey, jmc@ noted that list was out of date.
ok deraadt@, jmc@

ok deraadt

From danh@, ok aja@ giovanni@

ok ajacoutot sthen

ok ratchov@

with input from and ok sthen@

ok sthen@

rename key1 to tsig1 to clearly identify this name as a transaction
signature digest; consistently use tsig key name on slave zone.
ok jakob@

configuration without service disruption which is not what -HUP does for
nsd(8).
Anyway, zone operations (...) should be done using nsdc(8) and not with
an rc script.
discussed with and ok sthen@

from ajacoutot@.
ok deraadt ajacoutot

out by Arne Becker, who also supplied the diff, thanks!
ok schwarze@
agreed by many

regular user, member of the operator group); rm(1) was waiting for
interactive input to remove the runfiles which made no sense, so just
use `-f'.
issue spotted by weerd@
ok weerd@ robert@

Pretty terse for now but will eventually come with some more complex
examples when ratchov@ finishes some ongoing work on aucat(1).
ok ratchov@ jmc@ deraadt@

number of audio* nodes from 3 to 1 on vax, since none of the audio-capable
vax can receive another audio device as expansion (until we get TURBOchannel
support with DMA on VS4k/90).
ok deraadt@ todd@

just leave them untouched
ok ajacoutot@ sthen@ schwarze@

server _must_ be running and accessible before ypldap is started).
Add a proper pexp in the ypldap rc script.
discussed with pyr@ robert@ deraadt@
ok deraadt@

might pick it up from a polluted environment.
Requested by halex@, ok ajacoutot@ halex@

reading it failed, ${pexp} ended up as the empty string and the script
would send SIGTERM to init(1), which was really inconvenient.
Fix that by never allowing pexp to become empty.
My patch considerably simplified by and ok  ajacoutot@.

its _flags in rc.conf(8).
When the rc.d(8) system starts a daemon, it will record its pexp under
/var/run/rc.d/rcscriptname and use that to interact with it (errors in
creating /var/run/rc.d or missing pexp file are non fatal, the framework
will just fallback to what it currently does).
deraadt@ doesn't mind a long as it doesn't come in the way of people
manually managing their daemons.
discussed with and input from sthen@ halex@ robert@ schwarze@
ok sthen@ robert@

rc.conf is run.  There's no real downside.
ok aja

ok robert@

mistake in the previous commit.
No functionnal change.
ok robert@

/var/yp/binding does not exist, do _not_ try to start ypbind.
Make it possible to start ypbind the same way as the other daemons
(using ypbind_flags) while preserving the historical startup behavior.
tested by deraadt@

discussed with jsing and millert

ok robert@

already there).
ok sthen@ millert@ gilles@ deraadt@

with NFS here. Result of a discussion with several.
ok deraadt@ millert@

dance on restart rather than exporting them and expose the script to a
potentially polluted environment
ok ajacoutot@ robert@

RC_FORCE since "restart" calls "stop" then "start").
While here, append "_" to these variable names to make it clear they are
internal.
ok robert@

overlap with the port's config files

unset beforehands; prodded by halex@
Add rc_usage().
ok halex@

clean make build tested on i386;
ok deraadt@, no objections from martynas@

ok deraadt@ robert@

that we can use these scripts right away with /etc/rc.d/XXX -f without
having to manually set _flags.
ok robert@

debug mode.
This commit also adds a force mode for the script to allow one to force
operations even if daemon_flags is set to NO.
In this case the sane default values will be used for each script.
e.g.: "/etc/rc.d/foo -f start" will start sshd even if it's disabled
ok ajacoutot@

disappeared during the source manuals switch.
no objections from schwarze@ jmc@ deraadt@

from MERIGHI Marcus <mcmer-openbsd@tor.at>