The files /etc/bareos/autogenerated/clients/$CLIENT-HOST.include are generated by /usr/lib/univention-directory-listener/system/univention-bareos.py. It is called by UCS as soon as an LDAP object is changed.
I verified, that a call of
univention-directory-listener-ctrl resync bareos
indeed recreates the passwords in the *.include files.
However, I have no idea, why something like this should be called periodically on your system.
Have you got a cron job running for resynchronisation? Or do you change your LDAP objects periodically?
Anyhow, I created a bug report at https://bugs.bareos.org/view.php?id=850
However, I’m not sure, when it will be fixed.
regards,
Jörg