# Ladon Response: DefaultDeny:true **URL:** \ **Category:** Pydio Cells\ **Created:** [September 23, 2020, 8:51pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497 "2020-09-23T20:51:05Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![alpha23](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/alpha23/32/1998_2.png) [@alpha23](https://forum.pydio.com/u/alpha23)\ **Post date:** [September 23, 2020, 8:51pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/1 "2020-09-23T20:51:05Z")
Just installed pydio cells (docker image pydio/cells:2.1.1), uploaded a lot of data, and now I cannot access the application: 2020-09-23T20:36:11.305Z ERROR pydio.rest.frontend Ladon blocked POST request at /frontend/session. Ladon Response: DefaultDeny:true The following is my docker-compose file services section: services: cells: container\_name: pydio image: pydio/cells:2.1.1 restart: on-failure:5 volumes: - ./data:/var/cells/data - ./cellsdir:/var/cells - /etc/timezone:/etc/timezone:ro - ./ssl/server.pem:/root/ssl/ssl.cert - ./ssl/server.key:/root/ssl/ssl.key networks: - back environment: - CELLS\_BIND= - CELLS\_EXTERNAL=https:// - CELLS\_NO\_SSL=0 - CELLS\_SSL\_CERT\_FILE=/root/ssl/ssl.cert - CELLS\_SSL\_KEY\_FILE=/root/ssl/ssl.key ports: - “8087:8087” db: container\_name: pydio\_db image: mariadb:10.3 restart: on-failure:5 security\_opt: - no-new-privileges cap\_drop: - NET\_RAW - MKNOD environment: - MYSQL\_ROOT\_PASSWORD={MYSQL\_ROOT\_PASSWORD} - MYSQL\_DATABASE={MYSQL\_DATABASE} - MYSQL\_USER={MYSQL\_USER} - MYSQL\_PASSWORD={MYSQL\_PASSWORD} command: [mysqld, --character-set-server=utf8mb4, --collation-server=utf8mb4\_unicode\_ci] volumes: - ./db-vol:/var/lib/mysql - /etc/timezone:/etc/timezone:ro networks: - back I’ve noticed that others have posted this same issue numerous times but many responses seem to end with no follow up response from pydio. How do I fix this issue and log back in without reinstalling? ---
**Author:** ![charles](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/charles/32/3_2.png) [@charles](https://forum.pydio.com/u/charles)\ **Post date:** [October 5, 2020, 2:38pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/2 "2020-10-05T14:38:03Z")
Hello, This response is basically an authentication problem, so it’s hard to tell. Can you give more about the context? Do you reload the GUI? Do you see the Login form ? When is this error exactly happening? ---
**Author:** ![alpha23](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/alpha23/32/1998_2.png) [@alpha23](https://forum.pydio.com/u/alpha23)\ **Post date:** [October 5, 2020, 7:54pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/3 "2020-10-05T19:54:00Z")
Yes, GUI is reloaded and the login form is visible. It occurs after after entering username/password and selecting ‘Enter.’ It occurs for admin and non-admin accounts. ---
**Author:** ![alpha23](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/alpha23/32/1998_2.png) [@alpha23](https://forum.pydio.com/u/alpha23)\ **Post date:** [October 11, 2020, 4:02am UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/4 "2020-10-11T04:02:45Z")
Any update on this issue? ---
**Author:** ![bsinou](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/bsinou/32/476_2.png) [@bsinou](https://forum.pydio.com/u/bsinou)\ **Post date:** [October 12, 2020, 12:50pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/5 "2020-10-12T12:50:31Z")
Yes, we have heard of this problem before but were not able to reproduce it in our docker test setups until now. We yet suspect an issue with the communication with the DB. Could you please give more details about the “when” it happens, I mean: - did it start as you were adding a lot of new files or rather randomly afterwards ? - does restarting both containers solve the issue ? And - also how powerful is your server ? - did you get other errors prior to the one you mentioned (that is rather consequence than the root cause) ? ---
**Author:** ![alpha23](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/alpha23/32/1998_2.png) [@alpha23](https://forum.pydio.com/u/alpha23)\ **Post date:** [October 13, 2020, 3:35am UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/6 "2020-10-13T03:35:18Z")
did it start as you were adding a lot of new files or rather randomly afterwards? The issue occurred after the server was restarted ``` does restarting both containers solve the issue? No also how powerful is your server? 8 core, 32 GB did you get other errors prior to the one you mentioned (that is rather consequence than the root cause)? Not that I'm aware of ``` Again, here is the error: ‘2020-10-13T03:31:03.508Z ERROR pydio.rest.frontend Ladon blocked POST request at /frontend/session. Ladon Response: DefaultDeny:true’ Why is this occurring, i.e., what is Ladon, why is DefaultDeny set to ‘true’, and why is Ladon denying valid users, and how do I temporarily get past this issue, e.g., setting DefaultDeny to ‘false’? ---
**Author:** ![bsinou](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/bsinou/32/476_2.png) [@bsinou](https://forum.pydio.com/u/bsinou)\ **Post date:** [October 16, 2020, 1:13pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/7 "2020-10-16T13:13:35Z")
Hello @alpha23 We have mounted a similar environment and had it run for a while without encountering your case. I have discussed this to my fellow devs and we are convinced you must have some other error when launching the cells service. Could you please double check or if you prefer, DM me you server logs. Thanks for your patience. ---
**Author:** ![alpha23](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/alpha23/32/1998_2.png) [@alpha23](https://forum.pydio.com/u/alpha23)\ **Post date:** [October 16, 2020, 5:59pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/8 "2020-10-16T17:59:13Z")
Thank you for your reply; however can you please answer some of my questions that should be known now? I.e.: 1. What is Ladon? 2. Why is DefaultDeny set to ‘true’? 3. How do I temporarily get past this issue, e.g., setting DefaultDeny to ‘false’? Also, in the initial post I provided the compose file. If there is not an issue with the compose file, there should not be an issue with the configuration. Please advise on if there is an issue with the compose file. ---
**Author:** ![bsinou](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/bsinou/32/476_2.png) [@bsinou](https://forum.pydio.com/u/bsinou)\ **Post date:** [October 19, 2020, 7:33am UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/9 "2020-10-19T07:33:23Z")
- Ladon is the library that we use under the hood to manage security policy in the server (who can see what) , more details on this there: [https://pydio.com/en/docs/cells/v2/ed-security-policies](https://pydio.com/en/docs/cells/v2/ed-security-policies) (it is the same system in Home and ED, only that enterprise user can define and expand their own set of policies) - By default, nobody can see nothing in the server. - Your error means that the system cannot retrieve any of the “instance” ACL: - you cannot simply workaround this issue (basic security concern) - it usually means you have a problem with your DB connection, but root cause might be something else You told me you could, at least at the beginning, use seamlessly the system =\> I thus assume your config was OK. Only way to solve your problem is to diagnose and fix the issue so that you can start again retrieving the ACL and thus have permission to access the files. ---
**Author:** ![alpha23](https://yyz2.discourse-cdn.com/flex032/user_avatar/forum.pydio.com/alpha23/32/1998_2.png) [@alpha23](https://forum.pydio.com/u/alpha23)\ **Post date:** [November 14, 2020, 7:56pm UTC](https://forum.pydio.com/t/ladon-response-defaultdeny-true/3497/10 "2020-11-14T19:56:58Z")
I’ve reinstalled the instance and re-added data. Still testing. It may have been due to the fact that the database was on an NFS share. However, not having a way for users to re-cover from this is concerning.