pam: set PAM_RHOST

This allows pam modules to restrict users by host. For
instance, you could restrict root@pam to only 127.0.0.1.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

diff --git a/src/PVE/Auth/PAM.pm b/src/PVE/Auth/PAM.pm
index f19320d4e4496fc10f34934f02cdc989fcb8222c..feabc0b18bb564eacd484752fa4b9d065580756a 100755 (executable)
--- a/src/PVE/Auth/PAM.pm
+++ b/src/PVE/Auth/PAM.pm
@@ -43,6 +43,12 @@ sub authenticate_user {
        die "error during PAM init: $err";
     }
 
+    if (my $rpcenv = PVE::RPCEnvironment::get()) {
+       if (my $ip = $rpcenv->get_client_ip()) {
+           $pamh->pam_set_item(PAM_RHOST(), $ip);
+       }
+    }
+
     my $res;
 
     if (($res = $pamh->pam_authenticate(0)) != PAM_SUCCESS) {