[bdial]

Looks like the work on this is still in progress according to

Bug 15378 – Obviate the need for and disallow LDAP anonymous binds

until it's merged into GA you should use firewall to restrict access to the zimbra ldap service