Oracle as Airlock IAM database

This article describes using an Oracle database with the Airlock IAM database schema.

The chosen data layer has to be well managed and monitored. IAM is not responsible for the operation and backup/recovery. For production usage, the data layer should be clustered.

Database settings

  • Airlock IAM requires the following Oracle database settings:
  • UTF-8 character encoding AL32UTF8 for the database. UTF8 should not be used anymore for new databases as it only supports an older Unicode standard.
  • NLS_LENGTH_SEMANTICS=CHAR is contained in the schema from IAM 7.1 on. It can otherwise be set on the session before importing the schema (it should not be changed server-wide).

Schema creation and upgrade

SQL scripts for Oracle databases are available here:

SQL File

Description

Creates tables used for Airlock IAM.

Upgrades IAM 7.3 database schema for release IAM 7.4.

Upgrades IAM 7.4 database schema for release IAM 7.5.

Upgrades IAM 7.5 database schema for release IAM 7.6.

Upgrades IAM 7.6 database schema for release IAM 7.7.

Upgrades IAM 7.7 database schema for release IAM 8.0.

See DB Schema Migration IAM 8.0.

Inserts an administrator admin with password password (works with demo configuration).

Comment out SET sqlblanklines on if you are using an SQL client other than Oracle SQL*Plus.

For performance tuning hints, see: Performance tuning and scaling best practices

JDBC connector (JDBC driver)

  1. The JDBC connector (ojdbc*.jar) can be downloaded from the Oracle website. Ensure you download a version of the JDBC Connector suitable for your Oracle database.
  2. Copy the driver (JAR file) to the libs folder of the common instance (or an instance's folder). Example: 
    cp ojdbc-*.jar instances/common/libs/
  3. Configure the database pool plugin (JDBC Connection Pool) accordingly:
    1. Driver Class – oracle.jdbc.OracleDriver / when using a JDBC driver older than 9i, use oracle.jdbc.driver.OracleDriver.
    2. Url – The JDBC connection string. Examples are given in the property documentation in the Config Editor.
    3. Connection Test Statement – SELECT 1 FROM DUAL.
  4. Restart the IAM instance(s). See Starting and stopping Airlock IAM (system service integration).

Further information and links