Agreed. That'll setup LDP neighborships and allow the LSP end to end.

I just labbed up your scenario. Looks like no label is present because the entry is a recursive route without a label. You can check CEF to see this: R3#sh ip cef 11.11.11.11 detail 11.11.11.11/32, epoch 0, flags [rib defined all labels] recursive v...

What does the routing table on R1 and R3 look like? You might have received the BGP routes, but if they aren't in the RIB, then the router can't route the ping traffic.

I would check out this community post: https://community.cisco.com/t5/network-access-control/aaa-authorization-commands/td-p/2529011