Escaped colons in getent output aren't handle correctly.

[deryni]

Quoting Charles Duffy here:

Backslashes can actually be used inside getent output when there's a literal :, so the lack of a -r argument to read here (which would turn off its usually-undesired backslash processing) is intentional; it ensures that IFS characters that are intended to be literal rather than field separators are parsed as such.

So the -r argument to read in the getent call is possibly incorrect.