Description of problem:

Package fprintd-pam calls authconfig in postuninstall script.
But authconfig is replaced by authselect in Fedora 28,
and the compatibility tool does not what an administrator expects
when it removes package fprintd-pam.

I think the postuninstall script should either do nothing in Fedora 28, or do the right thing - that is only disable fingerprint, and leave the other authentication configuration in the same state (same config values, services in the same state).


# rpm -q --scripts fprintd-pam
postuninstall scriptlet (using /bin/sh):
if [ $1 -eq 0 ]; then
  /sbin/authconfig --disablefingerprint --update || :
fi


Here you can see what it would do:

# /sbin/authconfig --disablefingerprint --update
Running authconfig compatibility tool.

IMPORTANT: authconfig is replaced by authselect, please update your scripts.
See Fedora 28 Change Page: https://fedoraproject.org/wiki/Changes/AuthselectAsDefault
See man authselect-migration(7) to help you with migration to authselect

Executing: /usr/bin/authselect select sssd --force
Removing file: /etc/krb5.conf.d/authconfig-krb.conf
Removing file: /etc/sssd/conf.d/authconfig-sssd.conf
Executing: /usr/bin/systemctl disable sssd.service
Executing: /usr/bin/systemctl stop sssd.service
Executing: /usr/bin/systemctl disable winbind.service
Executing: /usr/bin/systemctl stop winbind.service


Version-Release number of selected component (if applicable):
fprintd-pam-0.8.0-2.fc28.x86_64

How reproducible:
Always.