dCache/dcache — pull request #623 by calestyo (2014-06-03 16:19:05+00:00)
Title: don't use real example domains for default values

Using RFC 2606 respectively 6761 domain names rather then domains like “cern.ch”
was some improvement already, but the well known reserved domains like
“example.org” are real existing domains and forbidden to be used as dCache uses
them now (see RFC 6761, section 6.5.)
These domains are only allowed within documentation.

Actually, using those domains in a system, will lead to their connected hosts
really being used and may even be a security issue.

In places where a domain name is used for a real configuration value,
RFC 2606/6761 define the “invalid.” TLD for such purposes.
This has the advantages that no correctly configured nameserver will ever
resolve these addresses to anything valid.

• Replace “example.org” with “example.invalid” for all default configuration
values.
• Even though a Kerberos realm isn’t a domain name per se, replace “EXAMPLE.ORG”
with “EXAMPLE.INVALID” to clearly indicate that this is an invalid realm.
• Leave “example.org” in place at any documentatory context, unless it directly
refers to the default value that has been changed now.

On the long term scale, dCache should leave all these options empty per default
and the respective service/functionality should simply refuse to start or block
if an option has not been set manually.

Require-book: no
Require-notes: yes

Signed-off-by: Christoph Anton Mitterer