LDAP-UX Client Services B.04.15 Administrator's Guide

RHOSTIP Returns the IP address of the remote host system from which the user starts
the PAM enabled application, such as telnet.
RHOSTNAME Returns the name of the remote host system from which the user starts the
PAM enabled application, such as telnet.
5.3.9.2 Examples
The following shows a sample access rule in the pam_authz.policy file:
allow:ldap_filter:(WorkstationIP=$[HOSTIP])
The above policy rule performs a security policy validation for users stored in the LDAP directory
server. If a user, Mary, has a WorkstationIP attribute in her user entry in the LDAP directory
and the value is 1.2.3.200. If Mary attempts to log in to the host with the IP address,
1.2.3.200, then the access rule is evaluated to be true and this user is granted login access.
104 Administering LDAP-UX Client Services