We know the three large IP address blocks that exist in Livermore, and we now
have an ip_in_cidr() function, so we are using that to tell if a system is in
Livermore.

This code will need updating only if the large network blocks in Livermore are
changed.

The KDCs were completely wrong, so this domain's configuration was redone.

This was requested in Remedy ticket INC000003427399.

We don't have anycast DNS in Livermore, so this adds a parameter to base::dns,
a parameter that can be set via Hiera, to put Livermore's DNS server at (or
near) the top of the list.

This is important for systems using Puppet and DHCP, because DHCP renewals
rewrite resolv.conf, which then gets re-re-written by Puppet.

On April 29, the Networking team notified all LNAs that the legacy "C" DNS
servers are being retired on November 1, and that they will start notifying
sysadmins this month if their systems are still querying the old DNS servers.