setfacl doesn't allow domain prefix with numeric userid

This document (7016995) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 11 Service Pack 4 (SLES 11 SP4)
SUSE Linux Enterprise Server 11 Service Pack 3 (SLES 11 SP3)
SUSE Linux Enterprise Server 12

Situation

When a user name or account name is composed entirely of numbers, 'setfacl' will not allow a domain prefix, so for example 'DOMAIN\123456' will not be possible.

Resolution

By adding the prefix '\134' (\134 is octal \) to the userid, e.g. DOMAIN\134123456, it is possible to use a numeric uid with the domain prefix.
DOMAIN\134123456 translates to DOMAIN\\123456 and setfacl/getfacl will then show it correctly as 'user:123456'.

A future update will allow '\\' instead '\134', and '\' corresponds to a literal backslash as is common everywhere else.

Cause

The '\' in the domain\userid 'DOMAIN\123456' can't be used, because '\' followed by three octal digits (0-7) in path, user or group names will be replaced by a character with that code.
'\123' in this example, 'DOMAIN\123456' translates to 'DOMAINS456' and is the incorrect userid.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.