Nsclient install options of NRPE

[Gonela]

Hi,

While installing nsclient++ 0.5 . there is some options under nrpe.
1.insecure mode
2.safe mode
3.secure mode

May i know the difference between all of these and if i select these options ,what is the impact from security perspective ?

[lmiltchev]

Insecure or legacy mode allows you to use the old check_nrpe.

https://docs.nsclient.org/faq/#71-what-is-insecure-mode

The safe mode uses certificates for encryption but not authentication. The secure mode uses certificates for authentication.

Note: NSClient++ is not developed or maintained by us (Nagios). If you need more information on the topic, I would recommend that you ask your questions on the NSClient++ support forum. It's difficult for us to help you with this particular topic as it is not very easy to find such information in the official NSClient++ documentation. Their NRPE reference section gives a "404 Not Found" error...

[mcapra]

I think this is the 2nd or 3rd iteration of the NSClient++ documentation structure in the short time I've been involved with Nagios:
https://docs.nsclient.org/reference/client/NRPEServer/

[lmiltchev]

Thanks @mcapra! BTW, I am still not able to find info on safe and secure modes (in the new NSC documentation).