Sorry, read before write Daniele :-( samba-tool drs replicate kdc02 kdc01 DC=DOMAINDNSZONES,DC=SAITELITALIA,DC=LOCAL made it work. (same for forestdnszones). But it works only on private/sam.ldb.d and not in the copy used for bind +dlz am I right? Daniele.