diff --git a/templates/etc/rabbitmq/rabbitmq.conf.j2 b/templates/etc/rabbitmq/rabbitmq.conf.j2
index 57b7f09..c16eb8e 100644
--- a/templates/etc/rabbitmq/rabbitmq.conf.j2
+++ b/templates/etc/rabbitmq/rabbitmq.conf.j2
@@ -17,11 +17,8 @@ auth_backends.1.authn = ldap
 auth_backends.1.authz = internal
 auth_backends.2       = internal
 auth_mechanisms.1     = PLAIN
-auth_mechanisms.1     = AMQPLAIN
-auth_mechanisms.1     = EXTERNAL
-# No certs for internal
-auth_mechanisms.2     = PLAIN
 auth_mechanisms.2     = AMQPLAIN
+auth_mechanisms.3     = EXTERNAL
 
 ssl_cert_login_from   = common_name
 auth_ldap.dn_lookup_bind.user_dn  = {{ rabbitmq_ldap_bind_dn }}