Solaris

We are real strict when it comes to passwords. Every 60 days the admins have to change passwords on all of the accounts. And there is pretty strict enforcement of the type of passwords chosen. This is a tedious and monotonous job. Ww don't use NIS or LDAP, so this has to be done on each machine. So we log into each machine and change each account. Not all accounts are on all machines. What I want to do it make a master shadow password file, find the user in it, take the line out, and replace the corresponding line taken from my generated master file.

Here is a line that does what I want:
sed 's/ramosg:MWmv2eaET4N3E:15266:7:60::::/ramosg:h8YU4ImoLFM.g:15248:7:60::::/g' shadow > shadow.changed1

The above should be one line. Here is what I tried in a script:

test1=$(grep $lognam shadow);
test2=$(grep $lognam shadow.changed);


sed 's/$test1/$test2/g' shadow > shadow.modified;

$lognam is the first field of shadow. Is that the right syntax for the sed command? It works when I issue the sed at the command line, but not in the script. Thanks.