as you see in the error message "rejected group (2 ms) - ... (no matching reader)" this is a local problem with your configuration
the request for a codeword > processing > answer/decline >> all together in 2ms = this ECM has not left your home and is blocked by Oscam itself
because your Oscam tries to use the correct caid 0963 it seems the reader is connected to the server
an error about rejected group might be the result of
different groups assigned to user and reader (the user, dvbapi in your case, has to use the same group as the reader does)
wrong configured services to limit access to the reader > disable any configuration regarding services for the user and/or reader (or remove the oscam.services.file)
wrongly configured dvbapi settings > remove a oscam.dvbapi file if you have one. As oscam.services and oscam.dvbapi file is only optional for optimization but as Sky only uses the 3 NDS caids 960, 961 and 963 and we only have one caid 963 from the server Oscam will directly use the only available reader for Sky channels with basic settings (oscam.conf, oscam.user and oscam.server)
also possible, that you have not assigned the caid 0963 to the user (dvbapi). Oscam will use any available caid if you have not specified any caid for the user but if you have configured caids for the user its necessary that 0963 is among the list of caids
on some systems its not necessary to configure a user at all if you use dvbapi-mode with Oscam. But in this case the logfile normally refers to the user as "anonymous". In your logfile the user is named dvbapi (... c dvbapi...) using dvbapi-mode (...c [DVBAPI]...)
easiest way to configure Oscam is the webinterface of Oscam
take a look at the oscam.conf and see for the section [webif] (or create it)
required parameters are
httpport = 8888
httpallowed = 127.0.0.1,192.168.1.1-192.168.254.254
in this case you can access the Oscam webif via a webbrowser and the URL
http://ip-of-your-receiver:8888you need to configure a reader on the tab "Readers" (seems this has already been done correctly, take a look at the group-number you have assigned to the Sky/0963-reader. Check that you have not specified "Services" for the reader)
you need to configure a user on the tab "Users" > see that the user has also access to the same group as the reader and the caid 0963 (if you have specified caids at all, or remove all caids from the settings and if available also disable any limitation within Services)
for dvbapi-mode a password is not required and should not be added to the users configuration
finally look on the tab "Configuration" > DVBApi (only necessary to control the username, boxtype seems to be correct from your logfile or is correct detected automatically