Problema com script

[Giovanni de Lima Mendes Souza]

No script abaixo estou com problemas com as aspas do ssh "  Bloco " e as
aspas dentro do bloco como descrito no script, irei marcar em vermelho onde
esta ocorrendo o problema. Se eu utilizar aspas duplas no ssh o primeiro
comando em vermelho que é o echo da erro mesmo escapando as aspas com o
contra-barra, se eu utilizar aspas simples no ssh nao preciso escapar as
aspas duplas, porém meus comandos sed -i ' parametro ' que utilizam aspas
simples não funcionam, tambem tentei escapar as aspas simples + sem sucesso.

Se alguem poder mi ajudar agradecerei imensamente.

#!/bin/bash

###################################################################
##Automatização de Procedimento de Segurança nos Servidores Linux##
###################################################################

############################################################################
# Script: cria_user.sh                                                     #
#                                                                          #
# Data: 29/09/2011                                                         #
#                                                                          #
# Autor: Fulano                                                    #
# Empresa: TESTE
#
#                                                                          #
# Funcao:                                                                  #
#    - Criação de usuários autorizados e individuais para cada analista    #
#  integrante da equipe de infraestrutura de TI (Suporte Unix, Rede e DBA) #
#                                                                          #
#                                                                          #
############################################################################


#################################################
##Verificando se usuários existem, adicionando ##
##    usuários,aviso e expiraçao de senhas     ##
#################################################

for servs in $(cat /home/scripts/hosttest)

do

    ssh root@${servs} "

    for USR in testuser usertest

    do

        if grep \"^${USR}:\" /etc/passwd

        then

           echo \"Usuario existente: ${USR}\"

        else

           echo \"Criando usuarios unix e rede\"

           groupadd supunix

           useradd -m -g users -G supunix -c \",Suporte Unix,MJV\" testuser

           if test -d /u01/app/oracle/product

           then

              echo \"Criando usuarios oracle\"

              groupadd supdba

              useradd -m -g users -G supdba -c \",Suporte DBA,MJV\" usertest


           else

              echo \"Oracle nao instalado\"

           fi

        fi

        *echo "${USR} ==> $(echo "${USR}" | sha1sum | cut -c1-10)"

        echo "${USR}" | sha1sum | cut -c1-10 | passwd --stdin ${USR}
*
        chage -d 0 ${USR}

        passwd -x 60 -w 10 ${USR}

    done

#########################################
#Realiza backup do arquivos de segurança#
#########################################

    echo \"Realizando backup dos arquivos de segurança\"

    mkdir /tmp/mdf4401

    cp -dpv /etc/login.defs /tmp/mdf4401/login.defs-bkp

    cp -dpv /etc/pam.d/system-auth /tmp/mdf4401/system-auth-bkp

    cp -dpv /etc/sudoers /tmp/mdf4401/sudoers-bkp

    cp -dpv /etc/ssh/sshd_config /tmp/mdf4401/sshd_config-bkp

    cp -dpv /etc/profile /tmp/mdf4401/profile

    hostname=${HOSTNAME}

    tar -zcvf ${HOSTNAME}-mdf4401.tar  /tmp/mdf4401/*

    scp ${HOSTNAME}-mdf4401.tar root@172.31.150.34:/tmp/mdf4401/

##############################
#Altera arquivos de segurança#
##############################

    echo \"Realizando alteracoes de parametros\"

    echo \"%supunix   ALL=(ALL) ALL\" >> /etc/sudoers

    echo \"%suprede   ALL=(ALL) ALL\" >> /etc/sudoers

    echo \"%supdba   ALL=(ALL) ALL\" >> /etc/sudoers

    *sed -i 's/^PASS_MIN_LEN\t5/PASS_MIN_LEN/g' /etc/login.defs

    sed -i 's/^password    requisite     pam_cracklib.so try_first_pass
retry=3 type=/password    requisite     pam_cracklib.so try_first_pass
retry=3 type=3 minlen=8 lcredit=1 ucredit=1 dcredit=1 ocredit=1/g'
/etc/pam.d/system-auth

    sed -i 's/^#PermitRootLogin yes/PermitRootLogin no/g'
/etc/ssh/sshd_config*

    echo \"# Usuarios recusados
denyuser oracle\" >> /etc/ssh/sshd_config

    echo \"# Estabelece 300 seg como tempo maximo sem atividade no prompt
export TMOUT=300
readonly TMOUT\" >> /etc/profile

    echo \"HISTTIMEFORMAT='%F %T '
export HISTTIMEFORMAT
readonly HISTTIMEFORMAT\" >> /etc/profile"
done


[As partes desta mensagem que não continham texto foram removidas]