Bug 113717

Summary:	CISCO VPN Client software hangs kernel.
Product:	[openSUSE] SUSE LINUX 10.0	Reporter:	Miguel de Icaza <miguel>
Component:	Kernel	Assignee:	Andreas Jaeger <aj>
Status:	RESOLVED INVALID	QA Contact:	E-mail List <qa-bugs>
Severity:	Normal
Priority:	P5 - None	CC:	aj
Version:	unspecified
Target Milestone:	---
Hardware:	i686
OS:	SUSE Other
Whiteboard:
Found By:	Other	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Miguel de Icaza 2005-08-29 02:18:15 UTC

We are using the following software at the Cambridge office, its some Cisco VPN
software.  When the module is loaded and you log into the office the system will
hang:

Package:

http://primates.ximian.com/~ppouliot/vpnclient/vpnclient-linux-x86_64-4.6.03.0190-k9.tar.gz

Instructions:
http://primates.ximian.com/~ppouliot/vpnclient/README

Comment 1 Berthold Gunreben 2005-08-29 09:08:27 UTC

Please select the correct Product for your Bugreports. See also  
http://www.opensuse.org/index.php/Submit_a_bug  
All openSUSE Bugs that are not related to the wiki should go into Product SUSE  
LINUX 10.0, since this uses the same code base.  
 
Please also add all needed information in Bugzilla, because after some time, 
the information is not available in other locations.

Comment 2 Olaf Kirch 2005-08-29 09:36:24 UTC

Miguel, I'm awfully sorry, but this is most likely a problem in the Cisco 
kernel module. We cannot fix 3rd party software. 
 
Why does the Cambridge office rely on Cisco's IPsec implementation when 
we have a supported, working ipsec implementation in our product?

Comment 3 Olaf Kirch 2005-08-29 12:06:57 UTC

After talking to Andreas Jaeger, we both agreed that 3rd party kernel 
modules should be fixed by the companies providing them. Hence I'm closing 
this bug as wontfix

Comment 4 Miguel de Icaza 2005-08-29 16:09:59 UTC

Well, it is not like I want to run the CISCO software, if I had a choice, I
would not run any kind of ipsec software.

What we have been told is that due to the Sabarnes-Oxley legislation in the US
requires computer networks to be accessed with a certified VPN software.  So
even if there are open source implementation we are legally required to use a
government certified stack and not just any stack.

Comment 5 Olaf Kirch 2005-08-30 07:10:24 UTC

Miguel, I believe the kernel teams cannot support 3rd party software. 
This is something that Cisco would need to fix. 
 
Assigning to Andreas for a decision.

Comment 6 Andreas Jaeger 2005-08-30 07:36:32 UTC

I agree with Olaf.  Btw. this is something not even in our official kernel so
really nothing we ever committed to handle.

This is something for Cisco to do.