if you want to run the vpnclient as non-root-user (very desirable), you probably will get
privsep: unable to drop privileges: group set failed.
since the cvpnd needs to be run with root privileges.
Just give it the setuid root-Flag:
chmod 4111 /opt/cisco-vpnclient/bin/cvpnd
and have fun with yout user-built VPN tunnel.