We can set PUTAUT (CTX) in the channel to force local authorization, but this requires every authorized ID to be registered in the localauthentication domain.
For localauthentication, the attributes are present using the pwdadm and lsuser command to determine the next password change or the password expiry of that user.