I had the same error messages, but your post pointed out that you could select the source vrf under the aaa group server config. Thanks for that. I know you probably solved this years ago, but you should set the vrf to 2 and source-interface to vla...