auth pdnsutil check-zone SOA weirdness.
Frank Hauptle via Pdns-users <[email protected]> Wed, 1 Jul 2026 18:04:55 +0800
| Newsgroups | gmane.network.dns.powerdns.user |
|---|---|
| Message-ID | <CABLMkgQ1rGACRNLn6dTsAdms3vjYxiP5ArB+2qfw5HJ-XSBaAQ@mail.gmail.com> |
--===============3553243850379520386==
Content-Type: multipart/alternative; boundary="0000000000007c4244065589d37d"
--0000000000007c4244065589d37d
Content-Type: text/plain; charset="UTF-8"
Hello everyone
I am rusty as hell with DNS but I've had a pdns install running for about
10 years and I've administered bind over the years for work... and now I am
updating pdns it with shiny newness within docker containers (and with
poweradmin in docker also)
To test I am using "pdnsutil check-zone example.com" from the command line
of the container and I am getting this back.
pdns@833f0efd3662:/$ pdnsutil check-zone example.com
[*Error] No NS record at zone apex in zone 'example.com
<http://example.com/>'*
Checked 2 records of 'example.com', 1 errors, 0 warnings.
but if I run dig on my test domain I get this back:
dig +noall +answer +multiline example.com ANY @192.168.0.42
example.com. 3600 IN SOA ns.example2.com. hostmaster.example2.com.
(
2026070101 ; serial
14400 ; refresh (4 hours)
3600 ; retry (1 hour)
604800 ; expire (1 week)
3600 ; minimum (1 hour)
)
Before this the SOA was set to an invalid message which I fixed with an
entry in pdns.conf default-soa-content=
with the text as appears in the dig above.
but when I do a check-zone it still returns the error up the top.. doing my
head in.
Can anyone give me any pointers please?
best regards
Frank
--0000000000007c4244065589d37d
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><div>Hello everyone=C2=A0</div><div><span style=3D"backgro=
und-color:transparent">I am rusty as hell with DNS but I've had a pdns =
install running for about 10 years and I've administered bind over the =
years for work... and now I am updating pdns it with shiny newness within d=
ocker containers (and with poweradmin in docker also)</span></div><div><br>=
</div><div>To test I am using "pdnsutil check-zone=C2=A0<a href=3D"htt=
p://example.com/" target=3D"_blank">example.com</a>" from the command =
line of the container and I am getting this back.</div><div><br></div><div>=
pdns@833f0efd3662:/$ pdnsutil check-zone=C2=A0<a href=3D"http://example.com=
/" target=3D"_blank">example.com</a><br>[<b>Error] No NS record at zone ape=
x in zone '<a href=3D"http://example.com/" target=3D"_blank">example.co=
m</a>'</b><br>Checked 2 records of '<a href=3D"http://example.com/"=
target=3D"_blank">example.com</a>', 1 errors, 0 warnings.</div><div><b=
r></div><div>but if I run dig on my test domain I get this back:</div><div>=
dig +noall +answer +multiline=C2=A0<a href=3D"http://example.com/" target=
=3D"_blank">example.com</a>=C2=A0ANY @<a href=3D"http://192.168.0.42/" targ=
et=3D"_blank">192.168.0.42</a><br><a href=3D"http://example.com/" target=3D=
"_blank">example.com</a>. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A03600 IN =
SOA=C2=A0<a href=3D"http://ns.example2.com/" target=3D"_blank">ns.example2.=
com</a>.=C2=A0<a href=3D"http://hostmaster.example2.com/" target=3D"_blank"=
>hostmaster.example2.com</a>. (<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2=
026070101 ; serial<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 14400 =C2=A0 =
=C2=A0 =C2=A0; refresh (4 hours)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 3=
600 =C2=A0 =C2=A0 =C2=A0 ; retry (1 hour)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 604800 =C2=A0 =C2=A0 ; expire (1 week)<br>=C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 3600 =C2=A0 =C2=A0 =C2=A0 ; minimum (1 hour)<br>=C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 )<br></div><div>Before this the SOA was set=
to an invalid message which I fixed with an entry in pdns.conf default-soa=
-content=3D=C2=A0 =C2=A0=C2=A0</div><div>with the text as appears in the di=
g above.</div><div><br></div><div>but when I do a check-zone it still retur=
ns the error up the top.. doing my head in.</div><div><br></div><div>Can an=
yone give me any pointers please?</div><div><br></div><div>best regards</di=
v><font color=3D"#888888"><div><br></div><div>Frank</div></font></div>
--0000000000007c4244065589d37d--
--===============3553243850379520386==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users
--===============3553243850379520386==--