debugging permission denied issue

[Terry <td...@gm...>]

We just upgraded to 2.3.3 (via EPEL on RHEL 6).  After the upgrade,
our users get this when trying to simply scp in:
/usr/bin/rssh: Permission denied
lost connection

The security logs show this:
Dec 19 11:20:38 server01 sshd[19499]: Accepted
keyboard-interactive/pam for tdtest from ::1 port 42920 ssh2
Dec 19 11:20:38 serverws01 sshd[19499]: pam_unix(sshd:session):
session opened for user tdtest by (uid=0)
Dec 19 11:20:38 server01 sshd[19509]: Received disconnect from ::1:
11: disconnected by user
Dec 19 11:20:38 server01 sshd[19499]: pam_unix(sshd:session): session
closed for user tdtest

The only thing not commented out in rssh.conf is this:
logfacility = LOG_USER
allowscp
allowsftp
allowcvs
allowrdist
allowrsync
umask = 022

The users are all part of an "sftp" group that has this in /etc/security/access:
+:sftp:ALL

I am not sure how to further debug this.  Anyone have some ideas?

Thanks!