Well, this is not matter since pam_set_item expect this argument as a string. Besides there is not always possible to get map from ip address to hostname. So hostname is just a synonim for whatever information you cat get about remote machine.
ps. sorry for delay answer. On 11/16/2015 04:24 AM, Peter Eisentraut wrote: > On 10/13/15 4:12 PM, kolo hhmow wrote: >> Yes, sorry. I was in hurry when I posted this message. >> I dont understand whay in CheckPAMAuth function only PAM_USER item is >> adding to pam information before authenticate? >> Wheter it would be a problem to set additional pam information like >> PAM_RHOST which is very useful because we can use this item to restrict >> access to this ip address. > Your implementation uses NI_NUMERICHOST, but the documentation of > pam_set_item speaks of a "hostname". Which is correct? >