{ fetchurl, openldap }:
let
  kerberosSchema = fetchurl {
    url = "https://raw.githubusercontent.com/krb5/krb5/0bdd3b8058ed4ec9acc050e316bea86f6830b15f/src/plugins/kdb/ldap/libkdb_ldap/kerberos.schema";
    sha256 = "17fnkkf6s3lznsl7wp6914pqsc78d038rh38l638big8z608ksww";
  };
  puppetSchema = fetchurl {
    url = "https://raw.githubusercontent.com/puppetlabs/puppet/bf7c108825ffdb5ea89cf3e500d55d27ab64b8d2/ext/ldap/puppet.schema";
    sha256 = "11bjf5zfvqlim7p9vddcafs0wiq3v8ys77x8h6fbp9c6bdfh0awh";
  };
  schemas = [
    "${openldap}/etc/schema/core.schema"
    "${openldap}/etc/schema/cosine.schema"
    "${openldap}/etc/schema/inetorgperson.schema"
    "${openldap}/etc/schema/nis.schema"
    puppetSchema
    kerberosSchema
    ./immae.schema
  ];
in
  builtins.concatStringsSep "\n" (map (v: "include         ${v}") schemas)