Paul,
>> I'm not sure what to do for oxauth, or how to retain clients or gluu settings.
Most oxTrust and oxAuth configurations are inside LDAP & /opt/tomcat/conf/
If I were in your place I would install new Gluu Server in a separate VM with same hostname. Then:
* Copy existing Gluu Server's configuration files ( /opt/tomcat/conf/ ) inside new Gluu Server.
* Dump whole LDAP of old server.
* Restore that dumped copy in new Gluu Server.
Howto on LDAP restore & backup is available [here](http://opendj.forgerock.org/opendj-server/doc/bootstrap/admin-guide/#chap-backup-restore).
* Check status of new Gluu Server.