In section 16.1.6. UsersRoles Login Module there is Example 16.10. UserRoles Login Module, but correct name is UsersRoles (not UserRoles). It must be fixed. Same issue is in section 5.10. Secure the Management Interfaces via JAAS, there is sentense "First, create a security domain with the UserRoles login module", rewrite it to UsersRoles too.
Verified in Security Guide Revision 6.4.0-8