FAQ. Error "ICMP Socket permission error: allow ICMP without root privileges."
Error with the text ICMP Socket permission error: allow ICMP without root privileges. can occur in usm_poller since version 3.19.18 and is related to the fact that the operating system does not allow using ICMP for an unprivileged user. Since version 3.19.17, changes have been made to usm_poller to allow this service to be run as an ordinary user, which has a positive effect on security. If you encounter such an error, you should do the following:
1. Stop poller's service:
sudo supervisorctl stop usm_poller:*
2. Change the value of the user parameter in the service configuration file /etc/supervisor/conf.d/usm_poller.conf to www-data (or whatever you prefer, but not root)
3. Delete the log file (or change its owner to the same as in step 2) /var/log/usm_poller/poller.log
4. Reread the supervisor configuration (this action will also restart the service), then verify that the service has started and all copies are in the RUNNING state:
sudo systemctl restart supervisor sudo supervisorctl status
(It is possible that a pause of 10...15 seconds will be required between commands).
Now go back to the ERP USERSIDE interface and check if the error is still present. If the error is still present (this may be on relatively old operating systems), then you need to change the value of parameter net.ipv4.ping_group_range in sysctl.
To do this, execute the commands:
echo 'net.ipv4.ping_group_range = 0 2147483647' | sudo tee -a /etc/sysctl.conf sudo sysctl -p
If you experience an invalid argument error, then edit the /etc/sysctl.conf file and change the value of 2147483647 to 65535 and execute again:
sudo sysctl -p
Now go back to the ERP USERSIDE interface and check if the error is still present. If the error is still present, please contact technical support.