Use Drupal roles returned by CAS Server

It appears that this is not possible as of yet for drupal CAS, but I thought I'd check in to be sure because it seems like a potentially useful feature to implement if cannot currently be done.

I have all my users and user roles stored on example.com which is both my drupal home page as well as my CAS server. (Is that wrong to do? My single SSL certificate is bound to example.com rather than cas.example.com... is there a setup workaround or helpful link describing one?)

site.example.com is running as a CAS client on a separate IP address using example.com as its CAS server

I have three different user types on my CAS server, and I plan on adding more later. When a CAS login occurs, is it possible for the CAS client that receives the user ticket to recognize which local user type a CAS user belongs to?

Better yet, is it possible to have user types passed between CAS sites with a CAS login rather than determining their roles locally and declaring all incoming logins as uniform "CAS users"?

Thanks for any input or advice! I am still relatively new to drupal.

~Jason