Well I fixed my own problem. I went home, slept on it, and re -read the docs. I decided to run the verifier, and with the handy EJB spec I noticed the bean was not specifying the <prinkey-field>userid</prinkey-field> right (mispelled primkey). So I fixed that and ran the verify and it deployed just fine.
Lesson learned: use the verifyer and ANT.