I had the same error messages, but your post pointed out that you could select the source vrf under the aaa group server config.  Thanks for that.  I know you probably solved this years ago, but you should set the vrf to 2 and source-interface to vla...