#!/bin/sh

dns={{ dns[0] }}
ldap_user={{ ldap_user }}

kinit -k -t /etc/krb5.keytab "${ldap_user}"
nsupdate -g <<EOF
server ${dns}
update delete _acme-challenge.${CERTBOT_DOMAIN} TXT
send
EOF