Add an overall timeout on the client authentication cycle, so that
Tom Lane <tgl@sss.pgh.pa.us>
Add an overall timeout on the client authentication cycle, so that a hung client or lost connection can't indefinitely block a postmaster child (not to mention the possibility of deliberate DoS attacks). Timeout is controlled by new authentication_timeout GUC variable, which I set to 60 seconds by default ... does that seem reasonable?
Files
| Path | Change | +/− |
|---|---|---|
| doc/src/sgml/runtime.sgml | modified | +15 −1 |
| src/backend/libpq/pqsignal.c | modified | +6 −3 |
| src/backend/postmaster/postmaster.c | modified | +30 −4 |
| src/backend/storage/lmgr/proc.c | modified | +67 −39 |
| src/backend/tcop/postgres.c | modified | +4 −14 |
| src/backend/utils/misc/guc.c | modified | +9 −1 |
| src/backend/utils/misc/postgresql.conf.sample | modified | +1 −0 |
| src/include/storage/proc.h | modified | +4 −1 |