Semantics of radiusd.conf ?

Hi, I'm trying to understand the semantics of the radiusd.conf file. Specifically, when does a module (not) need to be mentioned in the authorize and authenticate sections of the config file ? For instance, I want mysql-based authorization, and eap-based authentication. For this, I have to do something like this: authorize { ... eap sql } authenticate { eap } Removing the eap from 'authorize' prevents the server from working correctly (works fine if you leave it in there). Why does eap have to be mentioned in 'authorize', if I only need it for authentication ? Thanks, Gabriel