Is the salt used with PBKDF2 secret? I have two network endpoints that need to use the same derived key.  Can the server send the salt to the client 'in the clear'?
Yes. Salts are only there to make a particular key derivation globally unique. They have no requirement of secrecy.