(ITS#8667) slapcat not honoring '-g' option

[gnoe@symas.com]

Full_Name: Gregory Noe
Version: 2.4.44
OS: Debian 8.7
URL: ftp://ftp.openldap.org/incoming/gregory-noe-170605.tar
Submission from: (NULL) (63.142.209.94)


Slapcat is not honoring the '-g' option.  The output includes entries from glued
subordinates when it shouldn't.  The attached test script
(gregory-noe-170605.tar) sets up the following DIT with inetOrgPerson entries in
each OU:

dn: dc=example,dc=com
  |- ou=NonSub00,dc=example,dc=com
  |- ou=NonSub01,dc=example,dc=com
  |- ou=NonSub02,dc=example,dc=com

glued sub: ou=Accounting,dc=example,dc=com
glued sub: ou=Administrative,dc=example,dc=com
glued sub: ou=Janitorial,dc=example,dc=com

Then the script runs 'slapcat -g -b dc=example,dc=com | grep ^dn'.  The result
contains entries from all three glued subordinates.

Tested using Symas OpenLDAP 2.4.44.5