AFAIK the generated auto.xml script should not include any passwords. All passwords should be provided by variables file or set manually in the process of automatic installation. 

That being said the following passwords can be found in the generate auto.xml script:

• dsPassword - enable-ipv6 (install datasource)
• xaPassword - enable-ipv6 (install datasource)
• password - setup-ldap-management-auth