what is your goal exactly?
to be able to access mgmt interface via ajp?
Yes, i don't want it to bypass the web tier (apache)
change configuration for management socket-bindings to bind to interface "public" instead of "management" as it is now.
you will find this on bottom of the configuration.