authenticate cisco nexus 5000 with freeradius

[Majed Zouhairy]

Peace, according to
https://community.cisco.com/t5/security-knowledge-base/nexus-integration-for-admin-access-with-free-radius/ta-p/3138329

the freeradius configuration is as such:

DEFAULT Group == cisco-rw, Auth-Type = System

         Service-Type = NAS-Prompt-User,

         cisco-avpair := "shell:roles*\"network-admin vdc-admin\"",

but it does not mention what section of freeradius to modify,
i tried adding all the information to the user, but then free radius 
wouldn't restart. which means Default group needs to be added to a 
different section.

any help?