Siemens SINEMA Remote Connect - Page 41

Configuring with Web Based Management
4.2 Starting the WBM
SINEMA Remote Connect - Server
Operating Instructions, 11/2017, C79000-G8976-C383-04
41
The following table shows several examples:
PKI DN filter rule
Description
For the user "JohnDoe" the following filter
rule is defined:
CN = max johndoe, OU = PD, O = Sie-
mens, C = DE
The attribute values exist in the user certificate.
The system signals the smart card user as user "JohnDoe" who is assigned
the "admin" role. The role has all access rights.
For the role "Service" the following filter
rule is defined:
CN = *, OU = Service_Group_Plant_1, O =
Siemens, C = DE
Only PKI card users obtain access for whom the relevant attribute values exist
for OU, O and C. This restricts access to a certain service group.
The system creates a temporary user who receives the rights assigned to the
"Service" role.
This user is listed in "User accounts > Users & Roles".
For the role "Service" the following filter
rule is defined:
CN = *, OU = *, O = *, C = DE
In this case, there is only the restriction to C = DE.
As placeholder the "*" character is used.