It uses a reverse DNS lookup. It takes the IP address of the client and uses whatever PTR record is returned for that name.
In my opinion doing authentication based on the name is not very useful at all, I suggest you consider using IP addresses instead.
See this document about how Mysql uses DNS.