The initscript of cisco-vpnclient-3des fails to stop if there isn't an active vpn connection. The current initscript use the command vpnclient to disconnect active vpn connections. If there isn't an active vpn connection vpnclient doesn't release module cisco_ipsec at the same time as the command exit. There is a small delay. The result is that the rmmod fails and the initscript doesn't stop succesfully. This small patch fixes this. I also moved the check if the module is loaded before the vpnclient command, because the vpnclient doesn't work at all if the module isn't loaded.
Created attachment 92227 [details, diff] small patch to fix vpnclient initscript
Fixed in CVS...
