Re: Signals blocked during auth

Peter Eisentraut wrote:
> Tom Lane writes:
>
> > I think this is fairly irrelevant, because a not-yet-backend should
> > have a fairly short timeout (a few seconds) before just shutting
> > down anyway, so that malfunctioning clients can't cause denial of
> > service; the particular case you mention is just one scenario.
>
> I have a note here about an authentication timeout on the order of a few
> minutes. You never know what sort of things PAM or Kerberos can go
> through behind the scenes.
>
> > OTOH, it'd be easy enough to turn on SIGTERM/SIGQUIT too, if you
> > think there's really any value in it.
>
> I think that would be reasonable.

OK, I'll go ahead and enable these two during authentication
with a special signal handler that simply does exit(0). The
postmaster expects all it's children to suicide anytime soon
more or less bloody depending on if he send's TERM or QUIT.
But at least, they have to terminate without waiting for the
client or otherwise infinitely.

Jan

--

#======================================================================#
# It's easier to get forgiveness for being wrong than for being right. #
# Let's break this rule - forgive me. #
#================================================== JanWieck(at)Yahoo(dot)com #

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com