From hw@skalatan.de Fri Aug  2 16:11:24 2019
From: Henning Westerholt <hw@skalatan.de>
To: sr-users@lists.kamailio.org
Subject: Re: [SR-Users] Error Registering the user and finding the AVP
Date: Fri, 02 Aug 2019 14:11:18 +0000
Message-ID: <2ddfc314-d09d-ac9f-e1f7-cd2ee790447b@skalatan.de>
In-Reply-To: <09e400d87034513a0f07049b427ef434@uma.es>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0471811728=="

--===============0471811728==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Hello Javiar,

I am not an IMS expert - but see my comment below inline:

Am 02.08.19 um 14:05 schrieb jespinosa:
> Hello,
> My name is Javier, I must first apologize for my little knowledge=20
> about the tool and my poor English. I am trying to connect a=20
> functional core network LTE with Kamailio and I have used the Polaris=20
> Networks Solution that brings an iso with both functionalities.
> The EPC is correctly configured and working because I can have data=20
> connection in my UE, I have also activated all the IMS options in the=20
> EPC: I have created the APN with ims identifier, the default carrier=20
> QCI assigned is 5 (for SIP signaling), the MME has activated the=20
> option to support IMS Voice over the PS session and the HSS and PCRF=20
> nodes are configured with the interfaces at the addresses and ports=20
> Cx-HSS 127.0.0.1:3868 and Cx-PCRF 10.11.0.35:3868 .
> There are several parameters that I do not know if it is necessary to=20
> activate, for example, in the PCRF the customization of the QCI for=20
> the media type, if I must include the OCS and OFCS as nodes, or if in=20
> the profile of my APN I must include authentication by PDN AAA.
> The configuration I use for the IMS is as follows:
> imsrealm =3D net1.test
> imsport =3D 5060
> pcscfgmip =3D 10.77.0.35
> pcscfgmipintf =3D eth6
> pcscfrxip =3D 10.102.81.111
> pcscfrxipintf =3D eth1
> icscfmwip =3D 127.0.0.21
> icscfmwipintf =3D lo:21
> icscfcxip =3D 127.0.0.20
> icscfcxipintf =3D lo:20
> scscfmwip =3D 127.0.0.23
> scscfmwipintf =3D lo:23
> scscfcxip =3D 127.0.0.22
> scscfcxipintf =3D lo:22
> audiobandwidth =3D 64
> videobandwidth =3D 128
> epcrealm =3D epc.mnc001.mcc001.3gppnetwork.org
> pcrfhost =3D pcrf2.morsecore
> pcrfrxip =3D 10.11.0.35
> pcrfrxport =3D 3868
> hsshost =3D hss6.morsecore
> hsscxdxip =3D 127.0.0.1
> hsscxdxport =3D 3868
>
> Both cores are running on the same machine but I have disabled the=20
> option of PCRF Co-located with IMS to be able to edit the pcrf host=20
> name since if I enable it it does not reach the peer pcrf.localhost=20
> even if the DNS is well configured. My UE is not able to launch the=20
> REGISTER by itself when it is going to make a call, so I am using the=20
> Google IMSDroid application to be able to launch the SIP requests and=20
> check the operation of the IMS. In the application of the UE the=20
> configuration is as follows:
> Identity: Alice
> Public Identity: sip:<MSISDN>@net1.test (MSISDN=3D8800000451 configurado=20
> previamente en el EPC)
> Private Identity: sip:<IMSI>@net1.test (IMSI incluyendo MCC y MNC)
> Password: alice
> Realm: net1.test (Aunque no s=C3=A9 si debo poner aqu=C3=AD=20
> epc.mnc001.mcc001.3gppnetwork.org, pero entonces la petici=C3=B3n da error)
> Network: Proxy-CSCF Host: 10.77.0.35:5060 Transport UDP and NO=20
> Proxy-CSCF discovery.
>
> So, I launch my request and the log of the P-CSCF node is as follows:
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53656]: INFO: <script>: REGISTER=20
> (sip:8800000451(a)net1.test (10.77.0.196:37651) to=20
> sip:8800000451(a)net1.test, 76203fe6-1d8f-bcba-c9ab-4050ac0d8cc8)
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53656]: INFO: cdp=20
> [authstatemachine.c:200]: auth_client_statefull_sm_process(): after=20
> callback of event 1
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53802]: INFO: cdp=20
> [authstatemachine.c:200]: auth_client_statefull_sm_process(): after=20
> callback of event 7
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53655]: INFO: <script>: REGISTER=20
> (sip:8800000451(a)net1.test (10.77.0.196:37651) to=20
> sip:8800000451(a)net1.test, 76203fe6-1d8f-bcba-c9ab-4050ac0d8cc8)
> Aug=C2=A0 2 12:50:05 morsecore kamailio[53664]: INFO: <script>: REGISTER=20
> (sip:8800000451(a)net1.test (10.77.0.196:37651) to=20
> sip:8800000451(a)net1.test, 76203fe6-1d8f-bcba-c9ab-4050ac0d8cc8)
> Aug=C2=A0 2 12:50:07 morsecore kamailio[53659]: INFO: <script>: REGISTER=20
> (sip:8800000451(a)net1.test (10.77.0.196:37651) to=20
> sip:8800000451(a)net1.test, 76203fe6-1d8f-bcba-c9ab-4050ac0d8cc8)
> Aug=C2=A0 2 12:50:11 morsecore kamailio[53666]: INFO: <script>: REGISTER=20
> (sip:8800000451(a)net1.test (10.77.0.196:37651) to=20
> sip:8800000451(a)net1.test, 76203fe6-1d8f-bcba-c9ab-4050ac0d8cc8)
>
> I understand that everything is correct until now, but in the I-CSCF=20
> node it appears:
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53397]: INFO: ims_icscf=20
> [cxdx_uar.c:71]: create_uaa_return_code(): created AVP successfully :=20
> [uaa_return_code]
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53465]: INFO: ims_icscf=20
> [cxdx_avp.c:137]: cxdx_get_avp(): cxdx_get_server_name: Failed finding=20
> avp
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53465]: INFO: ims_icscf=20
> [cxdx_avp.c:137]: cxdx_get_avp(): cxdx_get_capabilities: Failed=20
> finding avp
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53465]: INFO: ims_icscf=20
> [cxdx_avp.c:137]: cxdx_get_avp(): cxdx_get_result_code: Failed finding=20
> avp
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53465]: ERROR: ims_icscf=20
> [cxdx_uar.c:152]: async_cdp_uar_callback():=20
> RC_IMS_DIAMETER_ERROR_USER_UNKNOWN
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53465]: INFO: ims_icscf=20
> [cxdx_uar.c:71]: create_uaa_return_code(): created AVP successfully :=20
> [uaa_return_code]
> Aug=C2=A0 2 12:50:04 morsecore kamailio[53465]: ERROR: <script>: UAR=20
> failure - error response sent from module

This is the code that creates this error:

avp =3D cdpb.AAAFindMatchingAVP(msg,0,avp_code,vendor_id,0);
 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 if (avp=3D=3D0){
 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0 LM_INFO("%s: Failed finding avp\n",func);
 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0 return r;
 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }

So the module can't execute the AAAFindMatchingAVP function imported=20
from the CDP module. The README mentions a XML file that needs to be=20
defined, have you setup this as well?


> Where I believe that the REGISTER message is not even forwarded,=20
> however it seems that it gives an error that the user is unknown or=20
> not registered but if I access the MySQL database, the registered=20
> users are:
> +----+------------+-----------+----------+---------------+-----------------=
-----------------+----------------------------------+------+=20
>
> | id | username=C2=A0=C2=A0 | domain=C2=A0=C2=A0=C2=A0 | password | email_a=
ddress |=20
> ha1=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0 | ha1b=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=20
> rpid |
> +----+------------+-----------+----------+---------------+-----------------=
-----------------+----------------------------------+------+=20
>
> |=C2=A0 1 | alice=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | net1.test | alice=C2=A0=
=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0 |=20
> 91cc8c652ef5f37e91c468c7319d0086 | 044776963e2661788e8db076b393333e |=20
> NULL |
> |=C2=A0 2 | bob=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 | net1.test | bob=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=20
> 6ef7f9c924f1385d83cf22cbb94cfbbb | 0d893d2d8c10a044b918e4bd73b6bee5 |=20
> NULL |
> |=C2=A0 3 | 8800000451 | net1.test | alice=C2=A0=C2=A0=C2=A0 |=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 |=20
> 46811c4e58f298953a6f9efccf6c32f1 | 49c7a7ad84fe797fbefa2185be4cd226 |=20
> NULL |
> +----+------------+-----------+----------+---------------+-----------------=
-----------------+----------------------------------+------+=20
>
>
> However, I do not know if it is accessing the mounted MySQL database=20
> or accessing the HSS and on this node, in the databases it does not=20
> contain the user (although it must be because it is registered in the=20
> network correctly).
> In case it works, this is the trace of wireshark filtered by the=20
> protocols S1AP, SIP and Diameter just when a REGISTER request is=20
> launched:
> "596","2019-08-02=20
> 12:50:00.705985000","127.0.0.20","127.0.0.1","DIAMETER","130","cmd=3DDevice=
-Watchdog=20
> Request(280) flags=3DR--- appl=3DDiameter Common Messages(0) h2h=3Dfedcb89 =

> e2e=3D4df0bbf5 | "
> "597","2019-08-02=20
> 12:50:00.706133000","127.0.0.1","127.0.0.20","DIAMETER","210","cmd=3DDevice=
-Watchdog=20
> Answer(280) flags=3D---- appl=3DDiameter Common Messages(0) h2h=3Dfedcb89=20
> e2e=3D4df0bbf5 | "
> "599","2019-08-02=20
> 12:50:00.786878000","127.0.0.22","127.0.0.1","DIAMETER","130","cmd=3DDevice=
-Watchdog=20
> Request(280) flags=3DR--- appl=3DDiameter Common Messages(0) h2h=3Dfedcb89 =

> e2e=3D4df0bbf5 | "
> "600","2019-08-02=20
> 12:50:00.787019000","127.0.0.1","127.0.0.22","DIAMETER","210","cmd=3DDevice=
-Watchdog=20
> Answer(280) flags=3D---- appl=3DDiameter Common Messages(0) h2h=3Dfedcb89=20
> e2e=3D4df0bbf5 | "
> "602","2019-08-02=20
> 12:50:00.914405000","10.102.81.111","10.11.0.35","DIAMETER","130","cmd=3DDe=
vice-Watchdog=20
> Request(280) flags=3DR--- appl=3DDiameter Common Messages(0) h2h=3Dfedcb89 =

> e2e=3D4df0bbf5 | "
> "603","2019-08-02=20
> 12:50:00.914549000","10.11.0.35","10.102.81.111","DIAMETER","214","cmd=3DDe=
vice-Watchdog=20
> Answer(280) flags=3D---- appl=3DDiameter Common Messages(0) h2h=3Dfedcb89=20
> e2e=3D4df0bbf5 | "
> "622","2019-08-02 12:50:04.027238000","10.77.0.196","10.77.0.35","GTP=20
> <SIP>","1034","Request: REGISTER sip:net1.test=C2=A0 (1 binding) | "
> "623","2019-08-02 12:50:04.027347000","10.77.0.196","10.77.0.35","GTP=20
> <SIP>","1034","Request: REGISTER sip:net1.test=C2=A0 (1 binding) | "
> "624","2019-08-02=20
> 12:50:04.027448000","10.77.0.196","10.77.0.35","SIP","998","Request:=20
> REGISTER sip:net1.test=C2=A0 (1 binding) | "
> "625","2019-08-02=20
> 12:50:04.028850000","10.102.81.111","10.11.0.35","DIAMETER","426","cmd=3DAA=
=20
> Request(265) flags=3DRP-- appl=3D3GPP Rx(16777236) h2h=3Dfedcb8a=20
> e2e=3D4df0bbf6 | "
> "626","2019-08-02=20
> 12:50:04.029862000","10.11.0.35","10.102.81.111","DIAMETER","350","cmd=3DAA=
=20
> Answer(265) flags=3D-P-- appl=3D3GPP Rx(16777236) h2h=3Dfedcb8a e2e=3D4df0b=
bf6=20
> | "
> "630","2019-08-02=20
> 12:50:04.031113000","10.77.0.35","127.0.0.21","SIP","1280","Request:=20
> REGISTER sip:net1.test=C2=A0 (1 binding) | "
> "631","2019-08-02=20
> 12:50:04.031794000","127.0.0.21","10.77.0.35","SIP","440","Status: 100=20
> Trying | "
> "632","2019-08-02=20
> 12:50:04.032382000","127.0.0.20","127.0.0.1","DIAMETER","354","cmd=3DUser-A=
uthorization=20
> Request(300) flags=3DRP-- appl=3D3GPP Cx(16777216) h2h=3Dfedcb8a=20
> e2e=3D4df0bbf6 | "
> "633","2019-08-02=20
> 12:50:04.033101000","127.0.0.1","127.0.0.20","DIAMETER","298","cmd=3DUser-A=
uthorization=20
> Answer(300) flags=3D-P-- appl=3D3GPP Cx(16777216) h2h=3Dfedcb8a e2e=3D4df0b=
bf6=20
> | "
> "636","2019-08-02=20
> 12:50:04.033557000","127.0.0.21","10.77.0.35","SIP","504","Status: 403=20
> Forbidden - HSS User Unknown | "
>
> I don't know if any information or configuration details are missing=20
> but I can attach it at any time without any problem.
> Regards and thank you very much in advance,
> Javier Espinosa.
>
> _______________________________________________
> Kamailio (SER) - Users Mailing List
> sr-users(a)lists.kamailio.org
> https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users

--=20
Henning Westerholt - https://skalatan.de/blog/
Kamailio services - https://skalatan.de/services


--===============0471811728==--