Andrea Aime

Mind, as said previously, I'm not an expert in this area, that said... see below. The default cache implementation is the GuavaAuthenticationCache, that has a cleanup time of 10 minutes...

Looks legit to me, but it should be documented in these pages, otherwise users won't know about this possibility: * https://github.com/geoserver/geoserver/blob/main/doc/en/user/source/installation/linux.rst * https://github.com/geoserver/geoserver/blob/main/doc/en/user/source/installation/win_binary.rst

Lost track of this one! Merged now.

> I would be very unhappy with installing community modules into a release intended for production - the point of them is to get feedback on snapshot / nightly build...

If you want to get rid of the old jaxb fully, I believe you'll also have to upgrade upstream projects, for example, imageio-ext depends on it here: https://github.com/geosolutions-it/imageio-ext/blob/master/library/geocore/pom.xml (don't remember...

Another bit that is troublesome, is that GeoServer is also using jaxb in a number of modules, both in supported land, and amongst the community modules. All these projects move...

Thanks for this PR. I'm wondering about makig sure we're not breaking Eclipse users again... which could be done if we had a Github that would build with the Eclipse...

Go ahead

Overall it looks good, but I'm missing something, quoting from the description of the issue: > The PR replaces the master password info page that dumps the master password into...

@sikeoka are you still around? We have made comments on all your open PRs but saw no feedback for a long while