I was having the same problem until I realized that I can insert the

auth sufficient pam_fprint.so

into any pam.d file. So instead of entering this into the common-auth which is pulled by...