diff --git a/pam.changes b/pam.changes
index e83089e..6e57095 100644
--- a/pam.changes
+++ b/pam.changes
@@ -1,3 +1,10 @@
+-------------------------------------------------------------------
+Mon Mar 16 13:26:27 UTC 2020 - Josef Möllers <josef.moellers@suse.com>
+
+- pam_userdb moved to a new package pam-extra as pam-modules
+  is obsolete and not part of SLE.
+  [bsc#1166510, pam.spec]
+
 -------------------------------------------------------------------
 Thu Mar 12 16:01:46 UTC 2020 - Josef Möllers <josef.moellers@suse.com>
 
diff --git a/pam.spec b/pam.spec
index d731051..cf3ec93 100644
--- a/pam.spec
+++ b/pam.spec
@@ -82,6 +82,21 @@ PAM (Pluggable Authentication Modules) is a system security tool that
 allows system administrators to set authentication policies without
 having to recompile programs that do authentication.
 
+%package extra
+Summary:        PAM module to authenticate against a separate database
+Group:          System/Libraries%description
+BuildRequires:  libdb-4_8-devel
+BuildRequires:  pam-devel
+
+%description extra
+PAM (Pluggable Authentication Modules) is a system security tool that
+allows system administrators to set authentication policies without
+having to recompile programs that do authentication.
+
+This package contains useful extra modules eg pam_userdb which is
+used to verify a username/password pair against values stored in
+a Berkeley DB database.
+
 %package doc
 Summary:        Documentation for Pluggable Authentication Modules
 Group:          Documentation/HTML
@@ -320,6 +335,11 @@ done
 %verify(not mode) %attr(4755,root,shadow) /sbin/unix2_chkpwd
 %attr(0700,root,root) /sbin/unix_update
 
+%files extra
+%defattr(-,root,root,755)
+%attr(755,root,root) /%{_lib}/security/pam_userdb.so
+%attr(644,root,root) %doc %{_mandir}/man8/pam_userdb.8.gz
+
 %files doc
 %defattr(644,root,root,755)
 %dir %{_defaultdocdir}/pam