We upgraded from Mgnl 4.5.24 to 5.4.2 on Dec 16, 2015. During the course of that upgrade we found a number of medium to major issues with the CAS module and resolved them. We are pushing out another release Feb 9 with a few more changes that are also included here. None of them are specific to our institution, they are pretty much just straight up improvements and fixes. I'll try to enumerate the things that were broken before we started:

• Tests failed, module no longer compiled under 5.4.
• Under 5.4, logout did not work unless gzip filter enabled (gzip masks the problem by wrapping the response object).
• Under 5.4, attempting to load an image on an unauthorized path (including non-existent paths) while logged in via CAS causes fatal “Communication Error” preventing all editing.
• Users who do not yet have permission to the system got an ugly error message.
• Users who do not yet have permission to the system had to manually clear cookies after getting permission added.
• Usernames were not case-insensitive. (We changed it to lower-case the username as received from CAS).

All of these issues are now resolved.

The patch file also includes the patches we submitted in MGNLCAS-15, MGNLCAS-16, and MGNLCAS-17, so if accepted, those can all be closed.

Note: I just noticed that I didn't fix the delta label in the versionhandler class. All those tasks should be attached to 1.1.2 since that's your next version.