Re: auth pdnsutil check-zone SOA weirdness.

--===============7529784188303745561==
Content-Type: multipart/alternative; boundary="0000000000004e83600656118a99"

--0000000000004e83600656118a99
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

hi all,

Thanks for your help Brian,

I think a mismatch has happened between powerdns and poweradmin as the
exact same ns record added by poweradmin is not registered by check-zone,
but if I add it via add-record it works.
When I get a sec I will go directly to the DB and see what is different
about the records that might cause that. for now,  I have added them all
using add-record and it passes checks.

pdns 5.0.6
powerdns admin Version 0.4.2

regards

Frank


On Wed, Jul 1, 2026 at 4:33=E2=80=AFPM Frank Hauptle <franki.hauptle@gmail.=
com>
wrote:

> Hello everyone
> I am rusty as hell with DNS but I've had a pdns install running for about
> 10 years and I've administered bind over the years for work... and now I =
am
> updating pdns it with shiny newness within docker containers (and with
> poweradmin in docker also)
>
> To test I am using "pdnsutil check-zone example.com" from the command
> line of the container and I am getting this back.
>
> pdns@833f0efd3662:/$ pdnsutil check-zone example.com
> [*Error] No NS record at zone apex in zone 'example.com
> <http://example.com>'*
> Checked 2 records of 'example.com', 1 errors, 0 warnings.
>
> but if I run dig on my test domain I get this back:
> dig +noall +answer +multiline example.com ANY @192.168.0.42
> example.com.            3600 IN SOA ns.example2.com.
> hostmaster.example2.com. (
>                                 2026070101 ; serial
>                                 14400      ; refresh (4 hours)
>                                 3600       ; retry (1 hour)
>                                 604800     ; expire (1 week)
>                                 3600       ; minimum (1 hour)
>                                 )
> Before this the SOA was set to an invalid message which I fixed with an
> entry in pdns.conf default-soa-content=3D
> with the text as appears in the dig above.
>
> but when I do a check-zone it still returns the error up the top.. doing
> my head in.
>
> Can anyone give me any pointers please?
>
> best regards
>
> Frank
>

--0000000000004e83600656118a99
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">hi all,=C2=A0<br><div><br></div><div>Thanks for your help =
Brian,</div><div><br></div><div>I think a mismatch has happened between pow=
erdns and poweradmin as the exact same ns record added by poweradmin is not=
 registered by check-zone, but if I add it via add-record it works.=C2=A0=
=C2=A0</div><div>When I get a sec I will go directly to the DB and see what=
 is different about the records that might cause that. for now,=C2=A0 I hav=
e added them all using add-record and it passes checks.</div><div><br></div=
><div>pdns 5.0.6</div><div><span style=3D"background-color:transparent">pow=
erdns admin=C2=A0Version 0.4.2</span></div><div><span style=3D"background-c=
olor:transparent"><br></span></div><div><span style=3D"background-color:tra=
nsparent">regards</span></div><div><span style=3D"background-color:transpar=
ent"><br></span></div><div><span style=3D"background-color:transparent">Fra=
nk</span></div><div><br></div></div><br><div class=3D"gmail_quote gmail_quo=
te_container"><div dir=3D"ltr" class=3D"gmail_attr">On Wed, Jul 1, 2026 at =
4:33=E2=80=AFPM Frank Hauptle &lt;<a href=3D"mailto:[email protected]=
m">[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gm=
ail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,=
204,204);padding-left:1ex"><div dir=3D"ltr"><div>Hello everyone=C2=A0</div>=
<div><span style=3D"background-color:transparent">I am rusty as hell with D=
NS but I&#39;ve had a pdns install running for about 10 years and I&#39;ve =
administered bind over the years for work... and now I am updating pdns it =
with shiny newness within docker containers (and with poweradmin in docker =
also)</span></div><div><br></div><div>To test I am using &quot;pdnsutil che=
ck-zone <a href=3D"http://example.com" target=3D"_blank">example.com</a>&qu=
ot; from the command line of the container and I am getting this back.</div=
><div><br></div><div>pdns@833f0efd3662:/$ pdnsutil check-zone <a href=3D"ht=
tp://example.com" target=3D"_blank">example.com</a><br>[<b>Error] No NS rec=
ord at zone apex in zone &#39;<a href=3D"http://example.com" target=3D"_bla=
nk">example.com</a>&#39;</b><br>Checked 2 records of &#39;<a href=3D"http:/=
/example.com" target=3D"_blank">example.com</a>&#39;, 1 errors, 0 warnings.=
</div><div><br></div><div>but if I run dig on my test domain I get this bac=
k:</div><div>dig +noall +answer +multiline <a href=3D"http://example.com" t=
arget=3D"_blank">example.com</a> ANY @<a href=3D"http://192.168.0.42" targe=
t=3D"_blank">192.168.0.42</a><br><a href=3D"http://example.com" target=3D"_=
blank">example.com</a>. =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A03600 IN SO=
A <a href=3D"http://ns.example2.com" target=3D"_blank">ns.example2.com</a>.=
 <a href=3D"http://hostmaster.example2.com" target=3D"_blank">hostmaster.ex=
ample2.com</a>. (<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 2026070101 ; se=
rial<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 14400 =C2=A0 =C2=A0 =C2=A0; r=
efresh (4 hours)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0=
 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 3600 =C2=A0 =C2=A0=
 =C2=A0 ; retry (1 hour)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 604800 =
=C2=A0 =C2=A0 ; expire (1 week)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 3=
600 =C2=A0 =C2=A0 =C2=A0 ; minimum (1 hour)<br>=C2=A0 =C2=A0 =C2=A0 =C2=A0 =
=C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=
=A0 =C2=A0 )<br></div><div>Before this the SOA was set to an invalid messag=
e which I fixed with an entry in pdns.conf default-soa-content=3D=C2=A0 =C2=
=A0=C2=A0</div><div>with the text as appears in the dig above.</div><div><b=
r></div><div>but when I do a check-zone it still returns the error up the t=
op.. doing my head in.</div><div><br></div><div>Can anyone give me any poin=
ters please?</div><div><br></div><div>best regards</div><div><br></div><div=
>Frank</div></div>
</blockquote></div>

--0000000000004e83600656118a99--

--===============7529784188303745561==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Pdns-users mailing list
[email protected]
https://mailman.powerdns.com/mailman/listinfo/pdns-users

--===============7529784188303745561==--