PSARC/2009/036 Authorisation based login control: pam_auths [ timeout 01/30/2009 ]

[James Carlson]

Darren J Moffat writes:
> >> %h 		is replaced by the hostname, as returned by 	
> >> 		gethostname(3C)
> > 
> > That's just the local host name.  Is the remote host name ever
> > significant?
> 
> We have discussed wither or not the remote hostname (as found in 
> PAM_RHOST if it is available) is significant.  At this time we think not 
> but we could easily add it later as an expansion if needed.

OK.

> We have also decided to add one expansion:
> 
> 	%H	is replaced by the "reverse" of the value returned
> 		by gethostname(3C) for example if gethostname returns
> 		'foo.example.com' then %H expands to: 'com.example.foo'
> 		in the degenerate case where the value from
> 		gethostname(3C) has no dots %H is the same as %h.
> 
> 
> And update version of the spec is in the case dir.

OK; that all looks good to me.  +1

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677