I  figured it out:

When using the option `Security > Protect shared content with user accounts`, the opds gives an Error 500 even when authenticating with the right user/pass.

Without setting that option, everything is working.

Also reproduced on a Windows system.