diff --git a/doc/guide.html b/doc/guide.html
index e47bca9a4..4c0cddb3d 100644
--- a/doc/guide.html
+++ b/doc/guide.html
@@ -1071,6 +1071,8 @@ to this file, so a malicious user can’t use your configuration to perform
attacks.
You may want to allow login access only for certain users. pam_listfile.so
module provides such functionality.
+If you use pam_winbind to authorise against a Windows Active Directory,
+then /etc/nssswitch.conf must be configured to use winbind as well.
diff --git a/doc/guide.tex b/doc/guide.tex
index b1357f3e4..b0dd921ec 100644
--- a/doc/guide.tex
+++ b/doc/guide.tex
@@ -1279,6 +1279,8 @@ to this file, so a malicious user can't use your configuration to perform brute-
attacks.
\item You may want to allow login access only for certain users. \term{pam\_listfile.so}
module provides such functionality.
+\item If you use \term{pam\_winbind} to authorise against a Windows Active Directory,
+then \term{/etc/nssswitch.conf} must be configured to use \term{winbind} as well.
\end{itemize}
\makesubsection{accessrules}{Access Rules}