Xena: Use newer liblasso package version in Ubuntu

etc/kayobe/kolla.yml

@@ -275,6 +275,14 @@ kolla_build_blocks:
         && grafana-cli plugins install grafana-piechart-panel
   ironic_inspector_header: |
     ADD additions-archive /
+  keystone_base_footer: |
+    {% raw %}
+    {% if base_package_type == 'deb' %}
+    RUN curl -sLO https://github.com/stackhpc/lasso/releases/download/applied%2F2.7.0-2build3/liblasso3_2.7.0-2build3_amd64.deb && \
+        sudo dpkg -i liblasso3_2.7.0-2build3_amd64.deb && \
+        rm -f liblasso3_2.7.0-2build3_amd64.deb
+    {% endif %}
+    {% endraw %}
   nova_base_footer: |
     # Fix for https://bugs.launchpad.net/nova/+bug/1955035, i.e.
     # https://bugzilla.redhat.com/show_bug.cgi?id=2090752 on c8s

etc/kayobe/kolla/globals.yml

@@ -1,8 +1,8 @@
 # yamllint disable-file
 ---
 
-# To work around issue of trying to install docker from 
-# empty pulp server, use upstream docker dnf repo on 
+# To work around issue of trying to install docker from
+# empty pulp server, use upstream docker dnf repo on
 # non-overcloud hosts
 enable_docker_repo: {% raw %}"{{ 'overcloud' not in group_names or ansible_facts.os_family == 'Debian' }}"{% endraw %}
 
@@ -12,6 +12,7 @@ bifrost_tag: xena-20230214T165534
 neutron_tag: xena-20230307T142413
 {% else %}
 bifrost_tag: xena-20230215T195824
+keystone_tag: xena-20230308T120251
 neutron_tag: xena-20230307T142414
 {% endif %}
 

releasenotes/notes/fix-liblasso-netiq-issue-afec5b2ee7de2a1e.yaml

@@ -0,0 +1,5 @@
+---
+fixes:
+  - |
+    Fixes the `issue <https://dev.entrouvert.org/issues/25640>`__ with using
+    SAML2 federation in Keystone against NetIQ IdP.