bump - we are getting this too....
EDIT - Damn, why do you always find the answer 5 minutes _after_ you post ?!?!?!
In Thunderbird, when creating the ldap lookup directory server, do NOT put anything in the "Bind DN" field.
Works fine now - sans password.