ipa-advise on a RHEL7 IdM server is not able to generate a configuration script for a RHEL8 IdM client

Issue

When configuring a RHEL 8 IdM client for smart card authentication with a RHEL 7 IdM server, ipa-advise has to be used on the server to generate a shell script that has to be run on the RHEL 8 IdM client.

Running this script on the client results in an error such as:

  Traceback (most recent call last):
  File "/usr/sbin/authconfig", line 656, in <module>
    main()
  File "/usr/sbin/authconfig", line 645, in main
    authcompat.runAuthselect()
  File "/usr/sbin/authconfig", line 562, in runAuthselect
    features.remove("with-smartcard-lock-on-removal")
ValueError: list.remove(x): x not in list
Failed to configure Smart Card authentication in SSSD