Some servers won't support the HTTP1.0 specification and will give an error 500 (for instance). This happened with a server where I uploaded an authentication script.
If it happens, you can try the HTTP1.1 header syntax :
header("WWW-Authenticate: Basic realm=\"My Realm\"");
header('status: 401 Unauthorized');