question about zmprov command in ldap master and replica environment

[tiger2000]

Dear all,

we have ldap master and ldap replica server in the environment and my question is when we run "zmprov ca" command in ldap-replica server, which case will be correct?

case 1:
'zmprov ca' will create account in ldap-master and then sync to ldap-replica.

case 2:
'zmprov ca' will create account in ldap-replica and then sync back to ldap-master.

from the installation guide, it's said ldap-replica is read-ONLY, thus it should be case 1, is it right?

could someone help on this? Thanks.