With the krb5 alpha1-6 packages it is fixed now, thanks!
net ads join, net ads testjoin, wbinfo -u, getent passwd now all show normal results for network accounts. The addition of allow_weak_crypto=true in /etc/krb5.conf ist not needed to join a Windows 2003 domain to use RC4 for ticket encryption.
