<div dir="ltr">Hi Kristian,<div><br></div><div>I will look into your pcaps this weekend. One point to look out for in the meantime.</div><div><br></div><div>Make sure that the "contact" can be found for the subscribe. The 403 is issued because we cannot find a contact based on the SUBSCRIBE message. depending on your cfg, usrloc will try to use contact header, via and/or received IPs and ports to locate your contact. This is a 'workaround' in the absence of ipsec which uniquely identifies each UE connection.</div><div><br></div><div>Can you also, please send your cfg file as well as the log file when you get the 403.</div><div><br></div><div>Cheers</div><div>Jason</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Jul 15, 2016 at 2:07 PM, Federico Favaro <span dir="ltr"><<a href="mailto:federico.favaro@athonet.com" target="_blank">federico.favaro@athonet.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000">
<font size="-1">Dear Kristian,<br>
<br>
Just take a look at the value you have at "Auth Lifetime" or
"Session Timeout" AVPs on AAR request from P-CSCF through PCRF.
Those are (afaik) Base Diameter AVPs. Those values are referring
to a timeout to cleanup the diameter session. It seems like, when
this timer will expire, the session will be cleaned up together
with the infos in usrloc.<br>
This way, P-CSCF receives a packet from an UE which is basically
unknown, so the request will be dropped and an error will be sent
out. <br>
So, in theory, this value should be much more than the
re-registration of the client itself. </font><br>
<font size="-1"><font size="-1">Anyway, i am only guessing because i
haven't still completely addressed the problem<br>
<br>
Best,<br>
<br>
Federico Favaro<br>
</font></font><div><div class="h5"><br>
<div>On 07/14/2016 06:14 PM, Kristian
Martens wrote:<br>
</div>
</div></div><blockquote type="cite"><div><div class="h5">
<pre>Hi,
I have installed Kamailio version 4.4.1. Everything works just fine. If
I connect a PCRF via Rx to the P-CSCF, the registration still runs
through as expected but the subsequent SUBSCRIBE is rejected with "403
Forbidden - You must register first with a S-CSCF" error cause or is
simply ignored (see attached wireshark traces).
And, if I disconnect Rx and restart the P-CSCF, the "forbidden" problem
still persists. (But I can work around this by cleaning up the P-CSCF
database.)
Any suggestions how I could get Rx working?
Thanks,
Kristian
</pre>
<br>
<fieldset></fieldset>
<br>
</div></div><pre>_______________________________________________
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list
<a href="mailto:sr-users@lists.sip-router.org" target="_blank">sr-users@lists.sip-router.org</a>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><span class="HOEnZb"><font color="#888888">
</font></span></pre><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
<pre cols="72">--
Federico Favaro
R&D Department
Athonet s.r.l
<a href="mailto:federico.favaro@athonet.com" target="_blank">federico.favaro@athonet.com</a></pre>
</font></span></div>
<br>_______________________________________________<br>
SIP Express Router (SER) and Kamailio (OpenSER) - sr-users mailing list<br>
<a href="mailto:sr-users@lists.sip-router.org">sr-users@lists.sip-router.org</a><br>
<a href="http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users" rel="noreferrer" target="_blank">http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-users</a><br>
<br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><table style="width:450pt" cellpadding="0" cellspacing="0" border="0" width="600"><tbody><tr><td style="padding:0cm" valign="top"><p></p></td></tr></tbody></table><table style="font-family:monospace" cellpadding="0" cellspacing="0" border="0" width="320px"><tbody><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px"><b>Jason Penton</b></td></tr><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px"><b>Senior Manager: Applications and Services</b></td></tr><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:15px;padding-top:10px"><b>Smile Communications Pty (Ltd)</b></td></tr><tr><td><table cellpadding="0" cellspacing="0" width="100%"><tbody><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:15px;padding-top:10px" width="27%"><b>Voice:<br><br>Mobile:</b></td><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:10px;padding-top:10px" width="73%"><span>+234 (0) 702 000 000 7</span><br><br>+27 (0) 83 283 7000</td></tr><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:15px;padding-top:10px"><b>Skype:</b></td><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(134,145,154);line-height:18px;padding-left:10px;padding-top:10px">jason.barry.penton</td></tr></tbody></table></td></tr><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px"><a href="mailto:name.surname@smilecoms.com" style="font-family:Arial;color:rgb(117,179,67);text-decoration:none" target="_blank">jason.penton@smilecoms.com</a></td></tr><tr><td style="font-family:Arial,sans-serif;font-size:16px;color:rgb(117,179,67);line-height:18px;padding-left:15px;padding-top:10px"><a href="http://www.smilecoms.com/" style="font-family:Arial;color:rgb(117,179,67)" target="_blank">www.smilecoms.com</a><br><img src="http://196.33.227.129/~smlcoms/sigs/pty/images/smile_signature_07_09.jpg" height="144" width="420"><br></td></tr></tbody></table></div><br></div></div></div></div></div></div>
</div>
<br>
<span><font color="#888888"><pre>This email is subject to the disclaimer of Smile Communications at <a href="http://www.smilecoms.com/home/email-disclaimer/" target="_blank">http://www.smilecoms.com/home/<WBR>email-disclaimer/</a><a href="http://www.smilecoms.com/disclaimer" target="_blank"></a></pre></font></span>