Pls help: virtual server specific EAP-TTLS/PEAP inner tunnel setting

Hi all, We got 2 problems when setting up a virtual server (testing.mydomain) to handle requests for realm @testing.mydomain: 1. we defined a new ldap server in modules/ldap and want to use it for authorization/authentication of realm @testing.mydomain, but have no idea how to use it since the ldap server defined in sites-enabled/inner-tunnel is always used. Can we define another inner-tunnel for this new virtual server? 2. seems authentication requests go through authorize section in sites-enabled/default before proxying to virtual server testing.mydomain. Can we skip this step or tell radiusd to go through authorize section other than the default one? Would anyone pls help? Thanks a lot. Best Regards, /ST Wong