Found out today that sometimes setfacl doesn't return an informative error.


# setfacl -m u:someguy:rx test2  
setfacl: Option -m: Invalid argument near character 3

The reason you get this error is because the someguy user does not exist. Setfacl will give the same error for groups that do not exist as well.