extdom: do reverse search for domain separator
    
    To avoid issues which @-signs in the short user or group names it is
    better to search for the domain separator starting at the end of the
    fully-qualified name.
    
    Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
    Reviewed-By: David Kupka <dkupka@redhat.com>