When new trust is requested or trust details obtained the response contains invalid URLs in the links section.
Discovered with and applies to openstack-keystone-2013.1.1-1.el6ost.
Send POST request to /v3/OS-TRUST/trusts with body like:
> {"trust":
> {"impersonation":false,
> "project_id":"<your-project-id>",
> "trustor_user_id":"<your-user-id>",
> "trustee_user_id":"<other-user-id>"}}
Reply will look like this:
> {'trust': {'expires_at': None,
> 'id': '<trust-id>',
> 'impersonation': False,
> 'links': {'self': 'http://localhost:5000/v3/trusts/<trust-id>'},
> 'project_id': '<your-project-id>',
> 'roles': [],
> 'roles_links': {
> 'next': None,
> 'previous': None,
> 'self': 'http://localhost:5000/trusts/<trust-id>/roles'},
> 'trustee_user_id': '<other-user-id>',
> 'trustor_user_id': '<your-user-id>'}}
1) In the 'trust/links' there is missing extension part of path "/OS-TRUST/" after the version ... full absolute path should look like "/v3/OS-TRUST/trusts/<trust-id>".
2) In the 'trust/roles_links' there is missing extension part and the version "/v3/OS-TRUST/"
This applies to most if not all Trusts responses - not only for creation, but also for listing or getting details or roles of trust's responses.
roles should not have the extension, only the trust self link.