diff --git a/test/test-fwknop.pl b/test/test-fwknop.pl
index f131cf53..06a45ff5 100755
--- a/test/test-fwknop.pl
+++ b/test/test-fwknop.pl
@@ -5195,6 +5195,7 @@ sub write_sudo_access_conf() {
         print CA "CMD_SUDO_EXEC_USER           $username\n";
     }
     if ($test_hr->{'sudo_exec_group'} eq $YES) {
+        print CA "CMD_EXEC_GROUP                $username\n";
         print CA "CMD_SUDO_EXEC_GROUP           $username\n";
     }
 
diff --git a/test/tests/rijndael_hmac_cmd_exec.pl b/test/tests/rijndael_hmac_cmd_exec.pl
index ef757de6..e611500b 100644
--- a/test/tests/rijndael_hmac_cmd_exec.pl
+++ b/test/tests/rijndael_hmac_cmd_exec.pl
@@ -250,5 +250,23 @@
         'cmd_exec_file_owner' => 'USER',
         'fw_rule_created' => $REQUIRE_NO_NEW_RULE,
     },
+    {
+        'category' => 'Rijndael+HMAC',
+        'subcategory' => 'client+server',
+        'detail'   => "command exec sudo current user (9)",
+        'function' => \&spa_cmd_exec_cycle,
+        'cmdline'  => qq|$fwknopCmd --server-cmd "touch $cmd_exec_test_file" | .
+            "-a $fake_ip -D $loopback_ip --rc-file $cf{'rc_hmac_b64_key'} " .
+            $verbose_str,
+        'fwknopd_cmdline'  => "$fwknopdCmd -c $cf{'def'} -a $sudo_access_conf " .
+            "-d $default_digest_file -p $default_pid_file $intf_str",
+        'sudo_test' => $YES,
+        'exec_user' => $YES,
+        'sudo_conf' => 'USER    ALL = NOPASSWD: /usr/bin/cat, (USER : USER) TOUCH',
+        'sudo_exec_user'  => $YES,
+        'sudo_exec_group' => $YES,
+        'cmd_exec_file_owner' => 'USER',
+        'fw_rule_created' => $REQUIRE_NO_NEW_RULE,
+    },
 
 );