idmap=user doesn't work when the user doesn't own their home directory, or the SSH server starts the client outside their home directory.

[avarner9]

I can't think of any workaround to allow idmap=user to work in these contexts, so I'm planning to add a new option: idmap=takeall . This will map all uids and gids on the server to the user's own uid and gid.

This should also make it easier for situations where you are root on the server, but unprivileged on the client, and you keep getting "access denied" errors on the client.

I'm planning to implement this myself, if there are no objections.

[h4sh5]

imo it sounds like a great feature to have, as long as it's documented well