For a session I called DOSDPSSession_SetTimeout, but noticed that the session was not connected by the timeout, and was not cancelled by the timeout.

TEP uses the same timer field, and was overriding the timer, then the server had a problem receiving the TEP confirm so the session did not come up, but the session did not time out either.

DOSTEP_Receive_Authorize is where the session timer seems to be changed.