MySQL as Airlock IAM database

This page describes how to use a MySQL database with the Airlock IAM database schema. In order to use Airlock IAM with this database, a JDBC connector/driver library is required.

 
Notice
  • The chosen data layer has to be well managed and monitored. IAM is not responsible for the operation and backup/recovery. For production usage, the data layer should be clustered.
  • In order to use Airlock IAM with this database, a JDBC connector/driver library is required.
 
Notice

Compatibility

MySQL version 8.0 or higher is required for full compatibility with the IAM database schema.

Database settings

In order to use Airlock IAM with MySQL a JDBC connector/driver library is required.

The following MySQL database settings may be useful:

Purpose

Command Line

my.cnf

Table names are used case insensitive.

Note: Use this option to avoid issues with older demo configurations using table names in upper case.

--lower_case_table_names=1

[mysqld]
lower_case_table_names=1

Set the database server to an explicit time zone. Do not use a dynamic time zone as CET/CEST.

For further information, see:

-

-

Schema creation and upgrade

SQLs scripts for MySQL databases are available here:

SQL File

Description

Creates tables used for Airlock IAM.

Upgrades IAM 8.2 database schema for release IAM 8.3.

See note below.

Upgrades IAM 8.1 database schema for release IAM 8.2.

Upgrades IAM 8.0 database schema for release IAM 8.1.

Upgrades IAM 7.7 database schema for release IAM 8.0.

See DB Schema Migration IAM 8.0.

Upgrades IAM 7.6 database schema for release IAM 7.7.

Upgrades IAM 7.5 database schema for release IAM 7.6.

Inserts an administrator “admin” with password “password” (works with demo configuration).

 
Notice

For performance tuning hints, see: Performance tuning and scaling best practices

 
Notice

Improtant note on schema migration from IAM 8.2 to IAM 8.3

Note that the schema upgrade from IAM 8.2 to IAM 8.3 contains a change to the collation of oauth2_session table.

Applying this change will cause a database index to be rebuilt. If the table contains a lot of records, this change may take a long time to complete.

Applying the change is recommended but optional.

JDBC connector (JDBC driver)

  1. The JDBC connector can be downloaded from the MySQL website (search for “jdbc connector” or “Connector/J”).
  2. Copy the driver (JAR file) to the libs folder of the common instance (or an instance's folder).
    Example:
  3.  
    Terminal box
    cp mysql-connector-java-*-bin.jar instances/common/libs/
  4. Restart the IAM instance(s): see e.g. Starting and stopping Airlock IAM (system service integration).
 
Functional limitation

The MySQL JDBC connector license restrictions do not permit the distribution of the library with Airlock IAM.

Further information and links

Internal links: