The first thing zmcontrol starts is LDAP. In order for LDAP to bind, it needs sudo privledges.
Linux is smart about sudo. It will always ask for a password, regardless of the error condition.
I'm guessing that your sudoers file is not correct.
Take a look at this article, and see if it helps:
Sudoers - Zimbra :: Wiki
Best,
john