I'm having the same problem. Added details to this bug report
Bug 24884 - zmtlsctl doesn't update zimbra.web.xml.in or zimbraAdmin.web.xml.in
BUILD: Release 5.0.2_GA_1975.RHEL5_20080130212656 CentOS5 NETWORK edition
Steps to reproduce
(to set redirect)
zmtlsctl redirect
zmcontrol stop
zmcontrol start
zmprov gs domain.com |grep Auth
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: domain.com
zimbraMtaAuthTarget: TRUE
zimbraMtaAuthURL: https://domain.com:443/service/soap/
zimbraMtaTlsAuthOnly: TRUE
zmprov gs domain.com |grep Mode
zimbraMailMode: redirect
zmprov ms domain.com zimbraMtaAuthHost domain.com
curl http://domain.com |grep Location
Location: https://domain.com:443/zimbra
(to set back to http)
zmtlsctl http
zmcontrol stop
zmcontrol start
zmprov ms domain.com zimbraMtaAuthHost domain.com
zmprov ms domain.com zimbraMtaTlsAuthOnly FALSE
zmprov gs domain.com |grep Auth
zimbraMtaAuthEnabled: TRUE
zimbraMtaAuthHost: domain
zimbraMtaAuthTarget: TRUE
zimbraMtaAuthURL: http://domain.com/service/soap/
zimbraMtaTlsAuthOnly: FALSE
zmprov gs domain.com |grep Mode
zimbraMailMode: http
curl http://domain.com |grep Location
Location: https://domain.com:443/zimbra
Editing out the protocol used and the
section in
mailboxd/webapps/zimbra/WEB-INF/web.xml
does not solve this, as the REDIRECTBEGIN block is somehow added back after the
reboot.