LDAP groups and how to filter

Hi there, I've got FreeRadius working off a FreeIPA backend to try and sort some issues with a firewall that won't filter on LDAP groups correctly. I've got my queries working, but now want to use post-auth to update a Group Name that the firewall will expect. Just wondering how in debug mode I could print out to debug all the groups that the user is a memberOf so I can write that logic. Sorry if this has been answered previously, I've not found an example, and I'm not much of an LDAP person. Cheers, Daniel