Ubuntu desktop (PBIS Open) drops out of domain - why and how to fix?

Question

Active Directory

There are several ubuntu 14.04 desktops in an Active Directory domain on Windows Server 2012R2. Join the domain using PBIS Open (8.3.3287). From time to time fall out of the domain. At the same time, only the local user remains on the login screen, it is not possible to log in with a domain account. There is nothing in the logs (auth.log or syslog) that distinguishes one state (working) from another (not working).
It was suspected that this happens after system updates, and was treated by installing the same version of pbis on top of the existing configuration. After the reboot, the system came to its senses and started up in the domain. But not today, not on a particular computer.
If the system is in a normal state, it shows the following status:

$ ./lsa get-status
LSA Server Status:

Compiled daemon version: 8.3.0.3287
Packaged product version: 8.3.3287.68880
Uptime:        0 days 1 hours 37 minutes 36 seconds

[Authentication provider: lsa-activedirectory-provider]

        Status:        Online
        Mode:          Un-provisioned
        Domain:        [вырезано]
        ...

then the problematic system says

$ ./lsa get-status
LSA Server Status:

Compiled daemon version: 8.3.0.3287
Packaged product version: 8.3.3287.68880
Uptime:        0 days 0 hours 8 minutes 8 seconds

[Authentication provider: lsa-activedirectory-provider]

        Status:        Unknown
        Mode:          Unknown

An attempt to enter the domain, for example, using ./lsa join domain usernameleads to an error:

ERROR: Incorrect access attempt (40158) (0x00009cde)

Where to look for the root of the problem? Well, how to fix it?