[SR-Users] Rx Interface connected, get error code: SIP/2.0 403 Forbidden - You must register first with a S-CSCF

[Jason Penton]

Hi Kristian,

I will look into your pcaps this weekend. One point to look out for in the
meantime.

Make sure that the "contact" can be found for the subscribe. The 403 is
issued because we cannot find a contact based on the SUBSCRIBE message.
depending on your cfg, usrloc will try to use contact header, via and/or
received IPs and ports to locate your contact. This is a 'workaround' in
the absence of ipsec which uniquely identifies each UE connection.

Can you also, please send your cfg file as well as the log file when you
get the 403.

Cheers
Jason

On Fri, Jul 15, 2016 at 2:07 PM, Federico Favaro <
federico.favaro at athonet.com> wrote:

> Dear Kristian,
>
> Just take a look at the value you have at "Auth Lifetime" or "Session
> Timeout" AVPs on AAR request from P-CSCF through PCRF. Those are (afaik)
> Base Diameter AVPs. Those values are referring to a timeout to cleanup the
> diameter session. It seems like, when this timer will expire, the session
> will be cleaned up together with the infos in usrloc.
> This way, P-CSCF receives a packet from an UE which is basically unknown,
> so the request will be dropped and an error will be sent out.
> So, in theory, this value should be much more than the re-registration of
> the client itself.
> Anyway, i am only guessing because i haven't still completely addressed
> the problem
>
> Best,
>
> Federico Favaro
>
> On 07/14/2016 06:14 PM, Kristian Martens wrote:
>
> Hi,
>
> I have installed Kamailio version 4.4.1. Everything works just fine. If
> I connect a PCRF via Rx to the P-CSCF, the registration still runs
> through as expected but the subsequent SUBSCRIBE is rejected with "403
> Forbidden - You must register first with a S-CSCF" error cause or is
> simply ignored (see attached wireshark traces).
>
> And, if I disconnect Rx and restart the P-CSCF, the "forbidden" problem
> still persists. (But I can work around this by cleaning up the P-CSCF
> database.)
>
> Any suggestions how I could get Rx working?
>
> Thanks,
> Kristian
>
>
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing listsr-users at lists.sip-router.orghttp://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>
> --
> Federico Favaro
> R&D Department
> Athonet s.r.lfederico.favaro at athonet.com
>
>
> _______________________________________________
> SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
> sr-users at lists.sip-router.org
> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users
>
>


-- 

*Jason Penton*
*Senior Manager: Applications and Services*
*Smile Communications Pty (Ltd)*


*Voice:Mobile:* +234 (0) 702 000 000 7

+27 (0) 83 283 7000
*Skype:* jason.barry.penton
jason.penton at smilecoms.com <name.surname at smilecoms.com>
www.smilecoms.com

-- 


This email is subject to the disclaimer of Smile Communications at http://www.smilecoms.com/home/email-disclaimer/ <http://www.smilecoms.com/disclaimer>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sip-router.org/pipermail/sr-users/attachments/20160715/bbc55459/attachment.html>