On Monday 23 May 2005 22:05, ģ�h wrote:
> hi,
> may i ask some stupid question.  :)

You may ask, but you may also receive a not-expected answer.

> I am using Samba 2.2.8a, how should i do if i don't want upgrade to the
> latest version of Samba but use the *.patch file?

Why do you not want to update to Samba-3.0.x? What have we done wrong?

Samba-2.2.x is a dead code tree that is no longer maintained. It has a number 
of security vulnerabilities, and is not fully compatible with current Windows 
clients, nor with recent Windows service patches.

The documentation for Samba-3 is extensive, including detailed guides for 
updating your system. The documentation for Samba-2.2.x consisted of a 
fraction of what is available now. Lack of documentation is no longer a 
reasonable objection.

> And there are so many patch files, should i patch every file to my system?

Well, it would help if we knew which patches you are referring to. We do not 
create patches because we need something to do, rather each has it's purpose.

> If the affected release of a patch file is "3.0.x <= 3.0.6", dose it mean
> this security issue just affect version 3.0.x and my system can ignore
> this?

Suffice to say that today, 18 months after 3.0.0 came out (and at version 
3.0.14a) no-one should be running an earlier 2.x version. There are security 
reasons for this, plus the longer you delay in updating the more work will be 
involved when you do. We put much effort into helping our users to remain 
current with Microsoft Windows service patches, and we work with the 
principal that small-step upgrades are less painful than massively 
discontinuous update performed after long intervals.

Recently I had to help a Samba site move from 2.0.7 to 3.0.14a in what had 
become a very challenging update. The update was forced because client 
workstations suddenly started to drop-off the network. The disruption caused 
would have been avoided had the site remained current.

No offense means, and I certainly would not want to come across as coercing a 
change - the decision is yours and yours alone.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to