Can't get MDB run-as to work

Question

I am trying to configure J2EE security on OC4J standalone 10.1.3 for a set of EJBs. I have a stateless session bean that I want to control access to. I have assigned method permissions to it so that only a certain role can access it. I then configured a client with J2EE credentials for a user in that role and remote EBJ lookup/access is working great.
The problem is that I also have a JMS-based MDB in the same application that needs to access the session bean, but I can't get the run-as declaration to take effect. When the MDB tries to call create() on the session bean's home interface, the following Exception gets thrown:
ERROR javax.ejb.AccessLocalException: anonymous is not allowed to call this EJB method, check your security settings (method-permission in ejb-jar.xml and security-role-mapping in orion-application.xml).
Below is the relevant sections from my deployment descriptors, if anybody has any input I'd appreciate it.
-Patrick
<!--ejb-jar.xml-->
<enterprise-beans>
<session>
<ejb-name>MyStore</ejb-name>
<security-role-ref>
<role-name>MyApplication</role-name>
<role-link>MyApplication</role-link>
</security-role-ref>
<security-identity>
<use-caller-identity />
</security-identity>
</session>
<message-driven>
<security-identity>
<run-as>
<role-name>MyApplication</role-name>
</run-as>
</security-identity>
</message-driven>
</enterprise-beans>
<assembly-descriptor>
<security-role>
<role-name>MyApplication</role-name>
</security-role>
<method-permission>
<role-name>MyApplication</role-name>
<method>
<ejb-name>MyStore</ejb-name>
<method-name>*</method-name>
</method>
</method-permission>
</assembly-descriptor>
<!-- orion-ejb-jar.xml (I've also tried the same security-role-mapping in orion-application.xml -->
<assembly-descriptor>
<security-role-mapping name="MyApplication">
<group name="users" />
</security-role-mapping>
</assembly-descriptor>

Answer 1

Password for what?