Follow-up: went with this and it works now:
/etc/httpd/conf/webauth/keytab -> /etc/webauth/
/etc/httpd/conf/webauth/keyring -> /var/lib/webauth/
/etc/httpd/conf/webauth/service_token_cache -> /var/lib/webauth/
/etc/httpd/conf/webauth/krb5cc_ldap -> /var/lib/webauth/
chcon -R -t httpd_sys_script_rw_t /var/lib/webauth/
Installer script source available upon request. Much thanks to Daniel Walsh
and Ken Yang for pointing me in the right direction.
Barry