This bug report holds the key to the solution. (Some possibly related reports: Ubuntu bug 1466654 and Red Hat bug 1095436.)

MS' AD server sends Kerberos tickets with user group information included. This makes the tickets too big for a single page of kernel memory. That trips the kernel module.