search

sleuthkit / autopsy

Autopsy® is a digital forensics platform and graphical interface to The Sleuth Kit® and other digital forensics tools. It can be used by law enforcement, military, and corporate examiners to investigate what happened on a computer. You can even use it to recover photos from your camera's memory card.
http://www.sleuthkit.org/autopsy/
2.41k stars 597 forks source link

Multi user client issues #6321

Closed zorovj closed 4 years ago

zorovj commented 4 years ago

Hello, I have setup a Remote Windows server with Postgres and Solr as per the latest documentation. But when I try to test connection from the autopsy client on a Windows system, I get an "invalid port" error.

The ports are open and a Tcp connection can be established from the client system.

The error logs for solr service test shows that the server resets connection after a TCP handshake. whereas for Postgres it shows - "Failed to acquire ephemeral connection to postgresql"

Any idea, what could be the issue?

Thanks!

esaunders commented 4 years ago

Looking at the code suggests that there should be more information to go along with that "Failed to acquire ephemeral connection..." message. It should be followed by the exact exception that happened. Check the messages.log and autopsy.log files in %APPDATA%\autopsy\var\log. You might also want to take a look at the logs on the PostgreSQL server to see if connection attempts are getting through. Those logs are usually in the data/pg_log folder.

zorovj commented 4 years ago

messages.log shows this for failed solr connection:

WARNING [org.netbeans.core.TimableEventQueue]: too much time in AWT thread org.netbeans.modules.sampler.InternalSampler@38f22d79

91119737 [AWT-EventQueue-0] INFO org.apache.http.impl.client.SystemDefaultHttpClient - I/O exception (java.net.SocketException) caught when processing request to {}->http://redacted.domain:8983: Connection reset 91119738 [AWT-EventQueue-0] INFO org.apache.http.impl.client.SystemDefaultHttpClient - Retrying request to {}->http://redacted.domain:8983

whereas autopsy.log shows the following:

org.sleuthkit.autopsy.centralrepository.datamodel.PostgresCentralRepoSettings getEphemeralConnection SEVERE: Failed to acquire ephemeral connection to postgresql.

Any idea what goes wrong?

zorovj commented 4 years ago

it was actually a firewall rule blocking the connection. issue resolved now