Resetting a forgotten CR Scribe PIN
How staff clear the 6 digit PIN of a CR Scribe log.
Anyone who opens a CR Scribe log for the first time can lock it with a 6 digit PIN. If the person who set it forgets it, staff can clear it. The log then stays readable by anyone with its link until somebody sets a new PIN. Clearing a PIN also ends every open session and every expiring share link of that log.
Two ways to reset
1. From IRC (room owner only). Send the Scribe bot a private message from the owner account:
/msg Scribe PIN #room RESET
2. From the staff reset page. Open https://www.conferencerooms.org/chat/cr/scribe/resetpasswd/, type the room name and the reset secret, and press Clear the PIN.
- The page only exists for the staff office addresses kept in a list on the server. From any other address it shows an ordinary "Not found" page, even to someone who has the secret.
- Wrong guesses are rate limited and locked out after a few tries. Every reset, and every refused attempt, is written to an audit trail.
Where the secret is
The reset secret is not written in the Help Center (these pages are public). It is stored only on the server, in ~/conferencerooms/scribe/data/reset.secret (readable by the server account only), and in the owner's private secrets file under scribe_reset_secret. The list of allowed addresses is ~/conferencerooms/scribe/data/reset-allowed-ips.txt (one address or range per line; edit it at any time, no restart needed). The audit trail is ~/conferencerooms/scribe/data/audit.log.
If the secret may have leaked, delete reset.secret and run sudo systemctl restart conferencerooms-scribe-web; a new one is made.
Never send the secret in a room, in chat or by email, and never ask a user to type it.