curl -v -H 'Accept: application/xml' -H 'Content-Type: application/
xml' -u username:password -d '<request></request>' http://theurl.com
I can use this same command against my dev machine (running either webrick or mongrel on Win XP) and it works ok.
It looks like the the basic authentication headers are being stripped out at some point but I'm not sure where.