Oh, I misread your comment on enabling BDB in heimdal. :)
No, I started out wondering if I needed to enable Keberos in OpenSSL.
I imagine I *do* want to enable BDB in Heimdal, no? Otherwise my
choices are NDBM (as I commented earlier: ISTM I've often heard Sun's
NDBM isn't to be trusted?) or using LDAP, which rather strikes me as
putting the cart before the horse (unless I'm totally off the rails--
which could well be) and a needless (?) complication. (No offense
to those who do it that way intended.)