Change <RequireAll><RequireOne> to <SatisfyAll><SatisfyOne>. The keyword 'Satisfy' seems to fit a little better since the blocks can contain both 'Require' and 'Reject' directives
httpd/httpd/branches/authz-dev/docs/manual/howto/auth.xml