If your client applications are running on Cloudera legacy products, they usually do not have Kerberos authentication enabled. When you try to connect to any COD instance, the connection fails because the COD instances have Kerberos enabled, by default. Now, you can disable Kerberos authentication in your COD instances so that HBase or Phoenix clients can connect seamlessly. For more information, see Disabling Kerberos authentication for HBase clients.
This is available starting in COD v1.19 and you do not need to upgrade to a higher version of COD to benefit from this feature.
Try out CDP Operational Database for free with Test Drive (no cloud account or setup is needed).