[Pdns-users] auth pdnsutil check-zone SOA weirdness.

Frank Hauptle franki.hauptle at gmail.com
Wed Jul 1 10:04:55 UTC 2026


Hello everyone
I am rusty as hell with DNS but I've had a pdns install running for about
10 years and I've administered bind over the years for work... and now I am
updating pdns it with shiny newness within docker containers (and with
poweradmin in docker also)

To test I am using "pdnsutil check-zone example.com" from the command line
of the container and I am getting this back.

pdns at 833f0efd3662:/$ pdnsutil check-zone example.com
[*Error] No NS record at zone apex in zone 'example.com
<http://example.com/>'*
Checked 2 records of 'example.com', 1 errors, 0 warnings.

but if I run dig on my test domain I get this back:
dig +noall +answer +multiline example.com ANY @192.168.0.42
example.com.            3600 IN SOA ns.example2.com. hostmaster.example2.com.
(
                                2026070101 ; serial
                                14400      ; refresh (4 hours)
                                3600       ; retry (1 hour)
                                604800     ; expire (1 week)
                                3600       ; minimum (1 hour)
                                )
Before this the SOA was set to an invalid message which I fixed with an
entry in pdns.conf default-soa-content=
with the text as appears in the dig above.

but when I do a check-zone it still returns the error up the top.. doing my
head in.

Can anyone give me any pointers please?

best regards

Frank
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.powerdns.com/pipermail/pdns-users/attachments/20260701/cc588eb8/attachment.htm>


More information about the Pdns-users mailing list