mca-dump-short.sh broken with APs

[tinkerfish]

When only using ssh key authentication, mca-dump-short.sh still attempts to pass in the unused password file variable. This doesn't seem to be an issue on UDMP or switches

72261:20250416:145634.331 Failed to execute command "/usr/lib/zabbix/externalscripts/mca-dump-short.sh '-d' '192.168.100.101' '-P' '22' '-u' '<username> '-i' '/var/lib/zabbix/.ssh/zb_id_rsa' '-t' 'AP' '-p' '{$UNIFI_SSHPASS_PASSWORD_PATH}' '-o' '25' '-b'": Timeout while executing a shell script.

the entire -p option should be omitted no?

[patricegautier]

unfortunately zabbix is not great a passing down optional parameters - but mca-dump knows to ignore -p if the value is '{$UNIFI_SSHPASS_PASSWORD_PATH}', which means the macro is unset in Zabbix.

So as expected..

[tinkerfish]

Ok, but its not. If I manually invoke mca-dump with the ssh key, I get a valid response so ssh keying is working and not causing the timeout. If I populate the '{$UNIFI_SSHPASS_PASSWORD_PATH}' macro, then it polls correctly. But unsetting the SSHPASS results in the timeout. So it appears '{$UNIFI_SSHPASS_PASSWORD_PATH}' is causing the script to timeout.

I'd be happy to provide logs

[patricegautier]

ok - are you positive you are invoking the mca-dump on the right host (zabbix server) with the same key as zabbix?

Anything noteworthy in /tmp/mcaDumpShort.err on the zabbix Server?

Logs welcome..