Hi everybody!
Since we do not have a service contract and unable to open TAC case, I will post my find here, maybe the right people will take note on this.
We are using Firepower Management Center 6.5.0 (FMC).
And out of the box API interface through JDBC client (System->Configuration->External Database Access) is not working because vjdbc application is using old java mysql connector. The internal application is using some commands (i.e. SET OPTION SQL_SELECT_LIMIT) which were deprecated and removed from support in newer versions of MySQL server(which is 5.6.42). As a result of this incompatability of versions any requests sent to the jdbc interface are failed because of the error.
To fix the problem one need to update mysql-connector-java used by vjdbc application.
Steps to FIX:
1. If enabled, Disable 'Allow External Database Access'
2. go to expert mode of CLI in FMC
3.
mkdir /tmp/backup
cd /Volume/6.5.0/jre/lib/
mv mysql-connector-java-5.1.11-bin.jar /tmp/backup/
wget --no-check-certificate https://github.com/go-sql-driver/sql-benchmark/raw/master/java/mysql-connector-java-5.1.26/mysql-connector-java-5.1.26-bin.jar
cp /var/sf/bin/vjdbc.pl /tmp/backup/
vi /var/sf/bin/vjdbc.pl
replace string:
my $MYSQL_JAR = "$JAVA_LIB_DIR/mysql-connector-java-5.1.11-bin.jar";
with new one:
my $MYSQL_JAR = "$JAVA_LIB_DIR/mysql-connector-java-5.1.26-bin.jar";
!wq
4. exit cli
5. Enable 'Allow External Database Access'
NOTE: This procedure must be repeated after FMC updates until developers fix this.
