diff --git a/lam/docs/manual-sources/howto.xml b/lam/docs/manual-sources/howto.xml
index e69c8d8e..9f1c9041 100644
--- a/lam/docs/manual-sources/howto.xml
+++ b/lam/docs/manual-sources/howto.xml
@@ -1854,6 +1854,34 @@ Have fun!
         </screenshot>
       </section>
 
+      <section>
+        <title>Authorized services</title>
+
+        <para>You can setup PAM to check if a user is allowed to run a
+        specific service (e.g. sshd) by reading the LDAP attribute
+        "authorizedService". This way you can manage all allowed services via
+        LAM.</para>
+
+        <para></para>
+
+        <para>To activate this PAM feature please setup your <emphasis
+        role="bold">/etc/libnss-ldap.conf</emphasis> and set
+        "pam_check_service_attr" to "yes".</para>
+
+        <para></para>
+
+        <para>Inside LAM you can now set the allowed services. You may also
+        setup default services in your account profiles.</para>
+
+        <screenshot>
+          <mediaobject>
+            <imageobject>
+              <imagedata fileref="images/mod_authorizedServices.png" />
+            </imageobject>
+          </mediaobject>
+        </screenshot>
+      </section>
+
       <section>
         <title>IMAP mailboxes</title>
 
@@ -2335,7 +2363,7 @@ Have fun!
 
         <para>ldap_user_sendas_relation_attribute = uid</para>
 
-        <para> <literallayout>
+        <para><literallayout>
 </literallayout><literallayout>
 </literallayout></para>
 
@@ -3714,6 +3742,24 @@ Have fun!
             Pro.</entry>
           </row>
 
+          <row>
+            <entry><inlinemediaobject>
+                <imageobject>
+                  <imagedata fileref="images/schema_authorizedServices.png" />
+                </imageobject>
+              </inlinemediaobject></entry>
+
+            <entry>Authorized services</entry>
+
+            <entry>authorizedServiceObject</entry>
+
+            <entry>ldapns.schema</entry>
+
+            <entry>Part of libpam-ldap installation</entry>
+
+            <entry></entry>
+          </row>
+
           <row>
             <entry><inlinemediaobject>
                 <imageobject>
diff --git a/lam/docs/manual-sources/images/mod_authorizedServices.png b/lam/docs/manual-sources/images/mod_authorizedServices.png
new file mode 100644
index 00000000..69d3ccae
Binary files /dev/null and b/lam/docs/manual-sources/images/mod_authorizedServices.png differ
diff --git a/lam/docs/manual-sources/images/schema_authorizedServices.png b/lam/docs/manual-sources/images/schema_authorizedServices.png
new file mode 100755
index 00000000..ea221c06
Binary files /dev/null and b/lam/docs/manual-sources/images/schema_authorizedServices.png differ