sleuthkit-users

[sleuthkit-users] Access from other than localhost?

[John T. H. <joh...@gm...>]

What must be done for me to access autopsy accross my LAN?

I tried changing "my $rema" from localhost to the hostname, and it
generated a random string in the URL (which makes sense) but when my
coworker attempted to access autopsy, it wouldn't allow him access.

-John

Re: [sleuthkit-users] Access from other than localhost?

[Brian C. <ca...@sl...>]

On Mar 23, 2005, at 9:34 AM, John T. Hoffoss wrote:

> What must be done for me to access autopsy accross my LAN?

Just supply the IP or host name on the command line. There is no need 
to modify the source code.

./autopsy 192.168.1.12

> I tried changing "my $rema" from localhost to the hostname, and it
> generated a random string in the URL (which makes sense) but when my
> coworker attempted to access autopsy, it wouldn't allow him access.

You can use the '-C' flag to skip the random number.  The number is 
used by default for remote access as a "cookie".

brian

Re: [sleuthkit-users] Access from other than localhost?

[John T. H. <joh...@gm...>]

That's what I tried before; I'm getting "access deneid, connection
logged" messages though.

Am I missing something? Is there a permission that needs to be set somewhere?

Thanks,

-John


On Thu, 24 Mar 2005 01:06:49 -0500, Brian Carrier <ca...@sl...> wrote:
> 
> On Mar 23, 2005, at 9:34 AM, John T. Hoffoss wrote:
> 
> > What must be done for me to access autopsy accross my LAN?
> 
> Just supply the IP or host name on the command line. There is no need
> to modify the source code.
> 
> ./autopsy 192.168.1.12
> 
> > I tried changing "my $rema" from localhost to the hostname, and it
> > generated a random string in the URL (which makes sense) but when my
> > coworker attempted to access autopsy, it wouldn't allow him access.
> 
> You can use the '-C' flag to skip the random number.  The number is
> used by default for remote access as a "cookie".
> 
> brian
> 
> 


-- 
John T. Hoffoss

Re: [sleuthkit-users] Access from other than localhost?

[Brian C. <ca...@sl...>]

On Mar 24, 2005, at 6:23 PM, John T. Hoffoss wrote:

> That's what I tried before; I'm getting "access deneid, connection
> logged" messages though.
>
> Am I missing something? Is there a permission that needs to be set 
> somewhere?

What does the autopsy.log log file in the evidence locker say? It 
should report the IP address that it thinks you are coming from.

brian

Re: [sleuthkit-users] Access from other than localhost?

[John T. H. <joh...@gm...>]

On Thu, 24 Mar 2005 22:00:55 -0500, Brian Carrier <ca...@sl...> wrote:
> 
> On Mar 24, 2005, at 6:23 PM, John T. Hoffoss wrote:
> 
> > That's what I tried before; I'm getting "access deneid, connection
> > logged" messages though.
> >
> > Am I missing something? Is there a permission that needs to be set
> > somewhere?
> 
> What does the autopsy.log log file in the evidence locker say? It
> should report the IP address that it thinks you are coming from.

autopsy.log:
Thu Mar 24 17:18:12 2005: ERROR: Unauthorized Connection from: 192.168.1.40
Thu Mar 24 17:18:20 2005: ERROR: Unauthorized Connection from: 192.168.1.40
Thu Mar 24 17:18:20 2005: ERROR: Unauthorized Connection from: 192.168.1.40

This is the remote host I'm trying to connect to. I started autopsy
with "autopsy -C ornthanc" (the computer name)

Re: [sleuthkit-users] Access from other than localhost?

[Brian C. <ca...@sl...>]

On Mar 25, 2005, at 11:11 AM, John T. Hoffoss wrote:
>
> autopsy.log:
> Thu Mar 24 17:18:12 2005: ERROR: Unauthorized Connection from: 
> 192.168.1.40
> Thu Mar 24 17:18:20 2005: ERROR: Unauthorized Connection from: 
> 192.168.1.40
> Thu Mar 24 17:18:20 2005: ERROR: Unauthorized Connection from: 
> 192.168.1.40
>
> This is the remote host I'm trying to connect to. I started autopsy
> with "autopsy -C ornthanc" (the computer name)

Try running with autopsy -C 192.168.1.40.  It may not be able to 
resolve the name to the IP.

brian