For the record, the problem was that bzr was trying only the first proposed authentication scheme (NTLM here which isn't supported) without falling back to the other proposed schemes (Basic here which *is* supported).
For the record, the problem was that bzr was trying only the first proposed authentication scheme (NTLM here which isn't supported) without falling back to the other proposed schemes (Basic here which *is* supported).