diff --git a/templates/ceph.conf b/templates/ceph.conf
index 4192847a..db55dd4e 100644
--- a/templates/ceph.conf
+++ b/templates/ceph.conf
@@ -53,6 +53,7 @@ rgw keystone admin token = {{ admin_token }}
 rgw keystone accepted roles = {{ user_roles }}
 rgw keystone token cache size = {{ cache_size }}
 rgw s3 auth use keystone = true
+rgw s3 auth order = local, external
 {% else -%}
 rgw swift url = http://{{ unit_public_ip }}
 {% endif -%}