Index: security/src/main/org/jboss/security/auth/spi/Util.java =================================================================== --- security/src/main/org/jboss/security/auth/spi/Util.java (revision 57281) +++ security/src/main/org/jboss/security/auth/spi/Util.java (working copy) @@ -83,7 +83,7 @@ if( trace ) log.trace("Checking user: "+user+", roles string: "+value); // See if this entry is of the form targetUser[.GroupName]=roles - int index = user.indexOf(roleGroupSeperator); + int index = user.indexOf(roleGroupSeperator, targetUser.length()); boolean isRoleGroup = false; boolean userMatch = false; if (index > 0 && targetUser.regionMatches(0, user, 0, index) == true)