rndc showzone?

Doug Freed dwfreed at isc.org
Mon Sep 22 14:38:46 UTC 2025


On 9/22/25 06:55, Havard Eidnes via bind-users wrote:
> Hi,
> 
> I'm trying to extend my personal "rndc subcommand" reportoire,
> and for this particular problem we're seeing, "rndc showzone"
> would have been useful.
> 
> However, in our cases, both with BIND 9.18.39 and BIND 9.20.13
> that command just completes with the message
> 
>     rndc: 'showzone' failed: failure
> 
> and an exit status of 1.
> 
> I can't seem to find any trace of this in the logs I've
> configured (that might be a consequence of our logging
> configuration).
> 
> I'm wondering "Is this just me and my configuration?"
> 
> Regards,
> 
> - Håvard

`rndc showzone` requires 'allow-new-zones' to be enabled, either 
globally or for the view in which the zone resides.  This is likely the 
cause of the failure you're seeing.  This could perhaps be a little more 
obvious in the error message (if possible), or at least in the 
documentation.

Note that the command does *not* show the DNS records in the zone, but 
rather the named configuration that defines the zone.

-Doug


More information about the bind-users mailing list