Issue resolved by setting an administrator dn and and password. I guess the memberOf attribute was protected and didn't return without a user to bind on prior to searching.
Long story short: Do not attempt anonymous authentication if you want to filter users on memberOf.