MySQL as Airlock IAM database

This page describes how to use an MySQL database with the Airlock IAM database schema.

The chosen data layer has to be well managed and monitored. IAM is not responsible for operation and backup/recovery. For productive usage, the data layer should be clustered.

Compatibility

MySQL version 8.0 or higher is required for full compatibility with the IAM database schema. See Techzone for information on using older MySQL versions.

Database settings

In order to use Airlock IAM with MySQL a JDBC connector/driver library is required.

The following MySQL database settings may be useful:

Purpose	Command Line	my.cnf
Table names are used case insensitive. Note: Use this option to avoid issues with older demo configurations using table names in upper case.	--lower_case_table_names=1	[mysqld] lower_case_table_names=1
Set the database server to an explicit time zone. Do not use a dynamic time zone as CET/CEST. For further information, see ● (MySQL) MySQL Bug Report #85816 ● (MySQL) MySQL 8.0 Reference Manual - System Variable 'system_time_zone'	-	-

Schema creation and upgrade

SQLs scripts for MySQL databases are available here:

SQL File	Description
create-medusa-schema.sql	Creates tables used for Airlock IAM.
iam-schema-migration-7_1-7_2.sql	Upgrades IAM 7.1 database schema for release IAM 7.2.
iam-schema-migration-7_2-7_3.sql	Upgrades IAM 7.2 database schema for release IAM 7.3.
iam-schema-migration-7_3-7_4.sql	Upgrades IAM 7.3 database schema for release IAM 7.4.
iam-schema-migration-7_4-7_5.sql	Upgrades IAM 7.4 database schema for release IAM 7.5.
iam-schema-migration-7_5-7_6.sql	Upgrades IAM 7.5 database schema for release IAM 7.6.
insert-admin.sql	Inserts an administrator "admin" with password "password" (works with demo configuration).

For performance tuning hints, see: 7.6. Performance tuning and scaling best practices

JDBC connector (JDBC driver)

1.
The JDBC connector can be downloaded from the MySQL website (search for "jdbc connector" or "Connector/J").
2.
Copy the driver (JAR file) to the libs folder of the common instance (or an instance's folder). Example: cp mysql-connector-java-*-bin.jar instances/common/libs/
3.
Restart the IAM instance(s): see e.g. 7.1. Starting and stopping Airlock IAM (system service integration).

The MySQL JDBC connector license restrictions do not permit the distribution of the library with Airlock IAM.

Further information and links

●
Minimal required database version see 6.3.1. Hardware and system requirements