[Pdns-users] Dig: zone queries are not answered without the ANY flag

[Nikolaos Milas]

On 14/12/2017 10:11 μμ, Nikolaos Milas wrote:

> ...
> So, I tried disabling recursion entirely and running the Authoritative 
> Server alone.
>
> However, the problem persists:
> ...

In the meantime, I upgraded to Auth Server 4.1 (running standalone, 
without recursion on the same box), but the problem seems to continue:

# systemctl status pdns
● pdns.service - PowerDNS Authoritative Server
    Loaded: loaded (/usr/lib/systemd/system/pdns.service; enabled; 
vendor preset: disabled)
    Active: active (running) since Thu 2017-12-14 22:44:50 EET; 5s ago
      Docs: man:pdns_server(1)
            man:pdns_control(1)
            https://doc.powerdns.com
  Main PID: 21218 (pdns_server)
    CGroup: /system.slice/pdns.service
            └─21218 /usr/sbin/pdns_server --guardian=no --daemon=no 
--log-timestamp=no --write-pid=no

Dec 14 22:44:50 vdns.noa.gr pdns[21218]: About to create 3 backend 
threads for UDP
Dec 14 22:44:50 vdns.noa.gr pdns_server[21218]: About to create 3 
backend threads for UDP
Dec 14 22:44:50 vdns.noa.gr pdns[21218]: [LdapBackend] Ldap connection 
succeeded
Dec 14 22:44:50 vdns.noa.gr pdns_server[21218]: [LdapBackend] Ldap 
connection succeeded
Dec 14 22:44:50 vdns.noa.gr pdns[21218]: [LdapBackend] Ldap connection 
succeeded
Dec 14 22:44:50 vdns.noa.gr pdns_server[21218]: [LdapBackend] Ldap 
connection succeeded
Dec 14 22:44:50 vdns.noa.gr pdns[21218]: [LdapBackend] Ldap connection 
succeeded
Dec 14 22:44:50 vdns.noa.gr pdns_server[21218]: [LdapBackend] Ldap 
connection succeeded
Dec 14 22:44:50 vdns.noa.gr pdns[21218]: Done launching threads, ready 
to distribute questions
Dec 14 22:44:50 vdns.noa.gr pdns_server[21218]: Done launching threads, 
ready to distribute questions

# pdnsutil check-zone noa.gr
Dec 14 22:45:06 Reading random entropy from '/dev/urandom'
Dec 14 22:45:06 [LdapBackend] Ldap connection succeeded
Dec 14 22:45:06 [LdapBackend] Ldap connection succeeded
Dec 14 22:45:06 [bind-bkend2backend] Parsing 1 domain(s), will report 
when done
Dec 14 22:45:06 [bind-bkend2backend] Done parsing domains, 0 rejected, 1 
new, 0 removed
[Error] No NS record at zone apex in zone 'noa.gr'
Checked 1 records of 'noa.gr', 1 errors, 0 warnings.

# less /var/log/pdns.log
...
Dec 14 22:44:50 vdns pdns[21218]: Reading random entropy from '/dev/urandom'
Dec 14 22:44:50 vdns pdns[21218]: Loading 
'/usr/lib64/pdns/libldapbackend.so'
Dec 14 22:44:50 vdns pdns[21218]: Loading 
'/usr/lib64/pdns/libbindbackend.so'
Dec 14 22:44:50 vdns pdns[21218]: This is a standalone pdns
Dec 14 22:44:50 vdns pdns[21218]: Listening on controlsocket in 
'/var/run/pdns.controlsocket'
Dec 14 22:44:50 vdns pdns[21218]: UDP server bound to 127.0.0.1:53
Dec 14 22:44:50 vdns pdns[21218]: UDP server bound to 194.177.195.162:53
Dec 14 22:44:50 vdns pdns[21218]: UDPv6 server bound to [::1]:53
Dec 14 22:44:50 vdns pdns[21218]: UDPv6 server bound to 
[2001:648:2011:15::162]:53
Dec 14 22:44:50 vdns pdns[21218]: TCP server bound to 127.0.0.1:53
Dec 14 22:44:50 vdns pdns[21218]: TCP server bound to 194.177.195.162:53
Dec 14 22:44:50 vdns pdns[21218]: TCPv6 server bound to [::1]:53
Dec 14 22:44:50 vdns pdns[21218]: TCPv6 server bound to 
[2001:648:2011:15::162]:53
Dec 14 22:44:50 vdns pdns[21218]: PowerDNS Authoritative Server 4.1.0 
(C) 2001-2017 PowerDNS.COM BV
Dec 14 22:44:50 vdns pdns[21218]: Using 64-bits mode. Built using gcc 
4.8.5 20150623 (Red Hat 4.8.5-11) on Nov 30 2017 10:19:16 by 
buildbot at f7be231fe43f.
Dec 14 22:44:50 vdns pdns[21218]: PowerDNS comes with ABSOLUTELY NO 
WARRANTY. This is free software, and you are welcome to redistribute it 
according to the terms of the GPL version 2.
Dec 14 22:44:50 vdns pdns[21218]: Listening for HTTP requests on 
194.177.195.162:8081
Dec 14 22:44:50 vdns pdns[21218]: Polled security status of version 
4.1.0 at startup, no known issues reported: OK
Dec 14 22:44:50 vdns pdns[21218]: Creating backend connection for TCP
Dec 14 22:44:50 vdns pdns[21218]: [LdapBackend] Ldap connection succeeded
Dec 14 22:44:50 vdns pdns[21218]: [bind-bkend2backend] Parsing 1 
domain(s), will report when done
Dec 14 22:44:50 vdns pdns[21218]: [bind-bkend2backend] Done parsing 
domains, 0 rejected, 1 new, 0 removed
Dec 14 22:44:50 vdns pdns[21218]: About to create 3 backend threads for UDP
Dec 14 22:44:50 vdns pdns[21218]: [LdapBackend] Ldap connection succeeded
Dec 14 22:44:50 vdns pdns[21218]: [LdapBackend] Ldap connection succeeded
Dec 14 22:44:50 vdns pdns[21218]: [LdapBackend] Ldap connection succeeded
Dec 14 22:44:50 vdns pdns[21218]: Done launching threads, ready to 
distribute questions
...

I don't understand what is happening.

*Why do I get the zone error?* Can you please shed some light on it?

Thanks,
Nick