diff --git a/tmpl/oned.conf b/tmpl/oned.conf
index 23a4bee..2e619ea 100644
--- a/tmpl/oned.conf
+++ b/tmpl/oned.conf
@@ -710,7 +710,11 @@ HM_MAD = [
 #*******************************************************************************
 AUTH_MAD = [
     executable = "one_auth_mad",
+%if %%getVar('sunstone_auth_modes', 'non') == 'non'
     authn = "server_cipher,default,%%sunstone_auth_modes"
+%else
+    authn = "server_cipher,default,%%getVar('sunstone_auth_modes','')"
+%end if
 ]
 
 SESSION_EXPIRATION_TIME = 900