Hello,
I was going through
http://www.postgresql.org/files/developer/tour.pdf and the source at http://doxygen.postgresql.org/postmaster_8c_source.html
The pdf shows the daemon process doing authentication and spawning a process to handle the request from the client.
"When a request message is received, we now fork() immediately. The child process performs authentication of the request,"