diff --git a/nss-pam-ldapd.spec b/nss-pam-ldapd.spec
index ac0117a..0817e38 100644
--- a/nss-pam-ldapd.spec
+++ b/nss-pam-ldapd.spec
@@ -17,6 +17,8 @@ Provides:	nss-ldapd = %{version}-%{release}
 # keep upgrades from removing the module.  We currently disable nss-pam-ldapd's
 # own pam_ldap.so until it's more mature.
 Requires:	/%{_lib}/security/pam_ldap.so
+# Pull in nscd, which is recommended.
+Requires:	nscd
 Requires(post):		/sbin/ldconfig, chkconfig, grep, sed
 Requires(preun):	chkconfig, initscripts
 Requires(postun):	/sbin/ldconfig, initscripts
@@ -156,6 +158,8 @@ exit 0
 * Fri May 14 2010 Nalin Dahyabhai <nalin@redhat.com> 0.7.4-1
 - update to 0.7.4
 - stop trying to migrate retry timeout parameters from old ldap.conf files
+- add an explicit requires: on nscd to make sure it's at least available on
+  systems that are using nss-pam-ldapd; otherwise it's usually optional
 
 * Tue Mar 23 2010 Nalin Dahyabhai <nalin@redhat.com> 0.7.3-1
 - update to 0.7.3