rollback on getent or id failure