don't use /opt/ paths in dcachesrm-gplazma.policy

There's still a place in the template file, where /opt is used, namely the
default for the kpwdPath property.

* Change the default value for the kpwdPath to "/etc/dcache/dcache.kpwd".

Actually I'd personally suggest introducing a new subdirectory like
/etc/dcache/access_control/
where access control related files should go into. This may include things like
grid-vorolemap, grid-mapfile, storage-authzdb or dcache.kpwd.
/etc/grid-security doesn't seem the right place for them, as they are not
necessarily grid-related.
But that could be done in another patch.

Signed-off-by: Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>
use example.org in some more places

example.org is already used in most places as default domain name.

* Use example.org instead of real (not reserved) domain names in some more
  places.

Using example.org is already much better than using real domain names as it was
done in the past, but still it has some negative effects.
If a dCache instance really uses them, the example.org server will get
“attacked”.
Or it could be even a security problem, when someone manages to actually run a
services on example.org, which dCache tries to use then (and potentially
trusts).

The best way IMHO would be to mark all options where an example value is given
with some flag, that they _must_ be overridden.
Another alternative, that should work in practise is using a domain like
“example.invalid” as this should already be sorted out by the local nameservers.
And ”invalid” is a specially reserved (top level) domain.

Signed-off-by: Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>
Merge pull request #30 from calestyo/example-domains

use example.org in some more places
Merge pull request #29 from calestyo/old-opt-paths

don't use /opt/ paths in dcachesrm-gplazma.policy
Add one-of annotation for log levels

Addresses the lack of an enumeration of allowed values for
dcache.log.level.* properties.

Require-book: no
Require-notes: yes
Request: 2.6
Target: master
Acked-by: Albert Rossi <arossi@fnal.gov>
Patch: http://rb.dcache.org/r/5548/
Merge branch 'master' into legacy-config-option
mark verifyHostCertificateChain to be obsolete
Signed-off-by: Christoph Anton Mitterer <mail@christoph.anton.mitterer.name>