[sleuthkit-users] Running several instances of multi-user Autopsy from same host, with different users

[Luis 'P. G. <po...@po...>]

Hi everyone,

I'm very happy to say I managed to get multi-user Autopsy running on Linux
(all of it). In particular, Ubuntu 18.04 LTS with these components:

   - postgresql 10 as shipped with the distro.
   - activemq 5.15 as shipped with the distro.
   - solr-4.10.3 (not the bitnami stack, just the regular download from
   Apache website).

I do know the doc suggests running the multi-user services in 1-2 separate
machines, however I'm using a fairly powerful system (140 GB RAM and a
bunch of Xeon processors) and everything is running in the same host right
now - including the Autopsy program itself.

Thing is, I have a number of users on that server and I would like each of
those accounts to run Autopsy in this same host (each sending their X
windows to the corresponding windows server in their local machine).

I have observed that the file structure created in the storage is like:

(autopsy base dir) / (case name) / (host name) / ....


And I am concerned this may cause issues when several connections to the
same case are open from the same host. Wouldn't it make sense to use "user
name + host name" instead of just host name? That would be:

(autopsy base dir) / (case name) / (user name) @ (host name) / ....

If anyone has valuable input, I will appreciate it. Otherwise, I may open
an issue about this in github.

Thanks for your time,

Pope