auth pdnsutil check-zone SOA weirdness.

Frank Hauptle via Pdns-users <[email protected]> Wed, 1 Jul 2026 18:04:55 +0800
Newsgroups gmane.network.dns.powerdns.user
Message-ID <CABLMkgQ1rGACRNLn6dTsAdms3vjYxiP5ArB+2qfw5HJ-XSBaAQ@mail.gmail.com>
--===============3553243850379520386==
Content-Type: multipart/alternative; boundary="0000000000007c4244065589d37d"

--0000000000007c4244065589d37d
Content-Type: text/plain; charset="UTF-8"

Hello everyone
I am rusty as hell with DNS but I've had a pdns install running for about
10 years and I've administered bind over the years for work... and now I am
updating pdns it with shiny newness within docker containers (and with
poweradmin in docker also)

To test I am using "pdnsutil check-zone example.com" from the command line
of the container and I am getting this back.

pdns@833f0efd3662:/$ pdnsutil check-zone example.com
[*Error] No NS record at zone apex in zone 'example.com
<http://example.com/>'*
Checked 2 records of 'example.com', 1 errors, 0 warnings.

but if I run dig on my test domain I get this back:
dig +noall +answer +multiline example.com ANY @192.168.0.42
example.com.            3600 IN SOA ns.example2.com. hostmaster.example2.com.
(
                                2026070101 ; serial
                                14400      ; refresh (4 hours)
                                3600       ; retry (1 hour)
                                604800     ; expire (1 week)
                                3600       ; minimum (1 hour)
                                )
Before this the SOA was set to an invalid message which I fixed with an
entry in pdns.conf default-soa-content=
with the text as appears in the dig above.

but when I do a check-zone it still returns the error up the top.. doing my
head in.

Can anyone give me any pointers please?

best regards

Frank

--0000000000007c4244065589d37d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>Hello everyone=C2=A0</div><div><span style=3D"backgro=
und-color:transparent">I am rusty as hell with DNS but I&#39;ve had a pdns =
install running for about 10 years and I&#39;ve administered bind over the =
years for work... and now I am updating pdns it with shiny newness within d=
ocker containers (and with poweradmin in docker also)</span></div><div><br>=
</div><div>To test I am using &quot;pdnsutil check-zone=C2=A0<a href=3D"htt=
p://example.com/" target=3D"_blank">example.com</a>&quot; from the command =
line of the container and I am getting this back.</div><div><br></div><div>=
pdns@833f0efd3662:/$ pdnsutil check-zone=C2=A0<a href=3D"http://example.com=
/" target=3D"_blank">example.com</a><br>[<b>Error] No NS record at zone ape=
x in zone &#39;<a href=3D"http://example.com/" target=3D"_blank">example.co=
m</a>&#39;</b><br>Checked 2 records of &#39;<a href=3D"http://example.com/"=
 target=3D"_blank">example.com</a>&#39;, 1 errors, 0 warnings.</div><div><b=
r></div><div>but if I run dig on my test domain I get this back:</div><div>=
dig +noall +answer +multiline=C2=A0<a href=3D"http://example.com/" target=
=3D"_blank">example.com</a>=C2=A0ANY @<a href=3D"http://192.168.0.42/" targ=
et=3D"_blank">192.168.0.42</a><br><a href=3D"http://example.com/" target=3D=
"_blank">example.com</a>. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A03600 IN =
SOA=C2=A0<a href=3D"http://ns.example2.com/" target=3D"_blank">ns.example2.=
com</a>.=C2=A0<a href=3D"http://hostmaster.example2.com/" target=3D"_blank"=
>hostmaster.example2.com</a>. (<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2=
026070101 ; serial<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 14400 =C2=A0 =
=C2=A0 =C2=A0; refresh (4 hours)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 3=
600 =C2=A0 =C2=A0 =C2=A0 ; retry (1 hour)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 604800 =C2=A0 =C2=A0 ; expire (1 week)<br>=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 3600 =C2=A0 =C2=A0 =C2=A0 ; minimum (1 hour)<br>=C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 )<br></div><div>Before this the SOA was set=
 to an invalid message which I fixed with an entry in pdns.conf default-soa=
-content=3D=C2=A0 =C2=A0=C2=A0</div><div>with the text as appears in the di=
g above.</div><div><br></div><div>but when I do a check-zone it still retur=
ns the error up the top.. doing my head in.</div><div><br></div><div>Can an=
yone give me any pointers please?</div><div><br></div><div>best regards</di=
v><font color=3D"#888888"><div><br></div><div>Frank</div></font></div>

--0000000000007c4244065589d37d--

--===============3553243850379520386==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

--===============3553243850379520386==--